PAN 11.0 Nova, the latest version of Palo Alto's firewall operating system, enables upgraded malware sandboxing and ties into the vendor’s new CASB.

software, palo alto networks, cyber security
Credit: Dreamstime

Palo Alto Networks has released next-generation firewall (NGFW) software that includes some 50 new features aimed at helping enterprise organisations battle zero-day threats and advanced malware attacks.

The new features are built into the latest version of Palo Alto’s firewall operating system – PAN 11.0 Nova – and include upgraded malware sandboxing for the vendor’s WildFire malware-analysis service, advanced threat prevention (ATP), and a new cloud access security broker (CASB).

WildFire is Palo Alto’s on-premises or cloud-based malware sandbox that is closely integrated with Palo Alto’s firewalls. When a firewall detects anomalies, it sends data to WildFire for analysis. WildFire uses machine learning, static analysis, and other analytics to discover threats, malware and zero-day threats, according to the vendor.

New to the service are Advanced WildFire features designed to better detect highly evasive zero-day malware attacks.

With Advanced WildFire, Palo Alto added intelligent run-time memory analysis combined with stealthy observation techniques that will let the system detect and protect resources quickly, said Anand Oswal, senior vice president, network security, at Palo Alto.

“Stopping the zero-day threats – that is the singular focus of this release. The new release stops 26 per cent more zero-day malware than traditional sandboxes and detects 60 per cent more injection attacks and keeps enterprises one step ahead of some very sophisticated threats.”

Oswal cited GuLoader, which is an advanced trojan downloader that uses shell code to evade antivirus-analysis techniques, as an example of today’s sophisticated threats.

PAN-11 Nova also builds on the previous version of the OS – which brought inline deep-learning capabilities – and adds ATP support for inline detection of zero-day injection attacks.

The idea behind applying deep learning inline, in real-time, on network traffic, is to detect and prevent new threats, including malware variants. The service can stop unknown attacks as they happen, not just remediate them after the fact, Oswal said.

“Look at injection attempts, which push malicious code into computer systems by really exploiting unpatched vulnerabilities in software,” Oswal said.

“We built in high-fidelity telemetry data from thousands of exploitable vulnerabilities over the last decade. And our internal testing has shown that when we enable this advanced threat prevention, we were able to detect 60 per cent more zero injection attacks than in the past.”

The new PAN-OS also ties into Palo Alto’s recently introduced next-generation CASB to help customers spot cloud security issues such as system misconfigurations, unnecessary user accounts, excessive user permissions, and compliance risks. The idea is to provide a dashboard to fix problems more quickly and lock critical security settings in place.

Palo Alto also bulked up the OS’ AIops support by adding the ability to search for and correct inefficiencies in firewall security policies before committing changes, helping organisations fortify their cyber defences.

“We have developed cybersecurity best practices over the years, and the system can tell customers, through ‘what if’ analysis what would bolster their security posture,” Oswal said. “For example, a customer might want to know ‘what will happen if I enable encryption here or what happens if I change these configurations?’ The system can offer the best practice for the configuration of those devices.”

In addition to the software upgrade, Palo Alto added new boxes to its NGFW family. At the high-end, it added the fixed-form-factor 2RU PA-5440, which is twice as fast as the high-end PA-5260. The 5440 is aimed at large campus and data centre customers.

For large branch-office environments, the company added the PA-1400, which features 5x performance and 7x session capacity compared to its previous generation box.

Lastly, the company introduced the PA-445 and PA-415 for small branches. These feature Power over Ethernet (PoE) support and are aimed at protecting devices such as access points, IP cameras, and IP phones without the need for additional electrical circuits.

All of the new firewalls will be available in December. PAN-OS 11.0 will be available in this month.

TECH NEWS RELATED

Anker’s New Monitor Stand Doubles as an All-In-One Docking Station

Anker The average USB docking station is just an ugly gray box. So, for those who want something a bit more flashy, Anker is launching the 675 12-in-1 USB Docking Station, which doubles as a monitor stand. It’s an impressive-looking product, and it offers plenty of ports for all ...

View more: Anker’s New Monitor Stand Doubles as an All-In-One Docking Station

M2 Pro and M2 Max benchmark results show a 30% faster GPU

Geekbench scores already showed how faster the M2 Pro processor is compared to the M1 Max chip in CPU performance. Now, new tests spotted by MacRumors highlight the graphic performance of the M2 Pro and M2 Max are about 30% faster than their predecessors. These tests align with what ...

View more: M2 Pro and M2 Max benchmark results show a 30% faster GPU

TikTok EU ban on the table if social network doesn’t comply with new laws

TikTok is one of the most popular social networks out there. But TikTok is also a cause of concern for western governments that worry about the company’s ties to the Chinese government. TikTok can’t run on most devices the US government issues, and there has been talk of a ...

View more: TikTok EU ban on the table if social network doesn’t comply with new laws

Don’t Buy a Foldable Until Samsung Brings This Prototype to Life

Samsung Display via The Verge The world of foldable phones is surprisingly stagnant. The Galaxy Z Fold gets a tiny little upgrade every year, and rival phone brands loosely copy Samsung’s homework. But a new Samsung Display prototype called the “Flex In & Out” could turn this narrative on ...

View more: Don’t Buy a Foldable Until Samsung Brings This Prototype to Life

Best free sports streaming apps in 2023

Cutting the cord on cable television is something tons of people have done over the past five years. But that hasn’t proven to be the smartest way to continue to watch sports. Whether it comes from premium sports website subscriptions to keep tabs on your favorite players, or even fantasy ...

View more: Best free sports streaming apps in 2023

Avengers 5 might have Ant-Man in it, Quantumania star teases

The first MCU Phase 5 movie will be Ant-Man and the Wasp: Quantumania, the third installment in the Ant-Man franchise and a film with much higher stakes than the previous episodes. The sequel will deliver the MCU’s first Kang (Jonathan Majors) villain after we met a somewhat good He Who ...

View more: Avengers 5 might have Ant-Man in it, Quantumania star teases

Sharing a Netflix Account? Get Ready to Pay For It

DANIEL CONSTANTE/Shutterstock.com Netflix is about to get serious in its efforts to eliminate freeloaders. If you share a Netflix account with family or friends outside your household, get ready to pay for it. A new “paid sharing” system could roll out starting next month, and you’ll have to pay a ...

View more: Sharing a Netflix Account? Get Ready to Pay For It

‘7 Wonders’ Board Game Gets a New ‘Edifice’ Expansion

Asmodee and Repos Production Board game lovers have a wonderful reason to celebrate today. Board game makers Asmodee and Repos Production announced their latest collaboration: 7 Wonders Edifice, an expansion to the popular board game 7 Wonders. The game launches on February 24th for $29.99. 7 Wonders: Edifice adds ...

View more: ‘7 Wonders’ Board Game Gets a New ‘Edifice’ Expansion

T-Mobile Kicks Off 2023 With Another Data Breach

Apple appeals to UK competition watchdog investigation about mobile browser dominance

Galaxy S23 Ultra release date and specs leak finally reveals everything about the new model

WhatsApp for iOS rolling out the ability to create a chat with yourself

Amazon Prime Music Unlimited changes streaming prices, now matches Apple Music

Domain.com review

Deadpool 3 and Secret Wars to feature Fox’s X-Men, according to Marvel insider

Report: OLED iPad Pro still on track for 2024 release, 2026 for MacBook Pro

How to negotiate over practically anything

HomePod 2 praised in exclusive hands-on before launch

M2 Pro MacBook Pro Amazon preorder deal gives you $50 off

This Microsoft Outlook update might finally stop people bugging you for a meeting

OTHER TECH NEWS

Top Car News Car News