Palo Alto Networks Next-Generation firewalls
Automate repetitive detection and triage tasks to lower your total cost of ownership of Palo Alto Networks firewalls.
Put an end to the 2AM wake-up calls.
When deploying Palo Alto Networks firewalls, organizations need to ensure configurations are done correctly and consistently. In addition performance needs to be continuously assessed and optimized. By using LiveAssurance, engineering and operations teams can be notified of misconfigurations and degradations in performance before they result in service downtime.
Let us take a few things off your plate
LiveAssurance takes care of key Palo Alto Networks maintenance needs to keep your firewalls operating properly and frees you up to take on bigger things.
Implement Palo Alto Networks best practices
- Content update schedule not following best practices – Antivirus, Wildfire, Content, GlobalProtect data file, GlobalProtect clientless VPN content
- Ensure update schedule set to download and install
- Debug mode enabled
- WildFire cloud registration is failing
- EDL(s) configured – empty or not used in policy
- High neighbor discovery (ND) cache usage
Automate maintenance tasks
- Device configuration backup
- Panorama certificate about to expire
- License usage limit approaching
- License about to expire
- Contract(s) expiration nearing
- VPN software end of support nearing
- Hardware & software end of support nearing
Increase network visibility
- SSL decryption – memory usage too high, sessions near capacity
- VPN – tunnels down, dropping packets due to authentication errors or decryption errors
- System – CPU, log DB usage, critical processes, packet buffer, packet descriptor
- Network Interfaces – packet drops, errors, link utilization, data plane pool utilization
- Connections – limit nearing, drastic drop, connection to Panorama
- Dynamic content update – WildFire, URL filtering, External Dynamic List
Demonstrate compliance
- Vulnerability profile not following best practices
- Ensure dangerous URL categories are blocked
- Decryption profile not following best practices
- DNS sinkholing not enabled
- Insecure LDAP communication
- Admin lockout time not within the recommended range
- Checks for OS software versions, DNS & NTP servers to ensure compliance
More on LiveAssurance
Black Hat MEA
Join BlueCat and CyberKnight at Black Hat MEA in Riyadh, Saudi Arabia December 2-4 and discover how our DNS security, threat protection, and packet capture…
Cisco Connect Canada
Visit the BlueCat team November 19 for Cisco Connect Canada in Toronto, and learn how to integrate DDI and observability into your Cisco networking and…
Microsoft Ignite
Visit BlueCat at Microsoft Ignite, November 18–21, and learn how our portfolio can orchestrate and extend visibility and performance assurance for…