Palo Alto Networks Firewall Plug-in
The Glasswall – Palo Alto Networks plug-in provides an additional layer of protection to the regular Palo Alto Networks Firewall. Next generation firewalls are effective in protecting against most attack vectors, but there is a protection gap.
File-based threats such as malware and ransomware can go undetected when the security filter is not aware of the structure of the document. Glasswall’s Content Disarm and Reconstruction engine supports a wide range of business files, and can shine a light on the threats hidden in files.
Supercharge your Palo Alto Networks Firewall
Close your file-based protection gap with our industry-leading CDR
Safely browse the internet with complete file security
Take a Zero-Trust approach to all file uploads and downloads
Key features
- All Glasswall supported files are automatically protected by the Glasswall CDR engine in real time as the user downloads files from the Internet, or as they upload them to a cloud service
- Palo Alto’s firewall adds industry-leading traffic decryption and firewall protection to Glasswall’s ISG* compliant CDR process, offering a comprehensive security solution to eradicate file-based threats
- Secure deployment using the standard Decryption Broker module which connects to an internal proxy and communicates via ICAP to the Glasswall CDR Platform
- Centralised reporting on the risks being identified in business documents and files
- On Premise, Data Centre, Private Cloud and Public Data Centre deployments supported
Use cases
Protecting against compromised websites
File-based threat defence
Zero-Trust architecture
Detection and removal of malware and ransomware
Prevent file metadata persisting in uploaded file
How it works
The Palo Alto Networks Firewall decrypts information as a user browsers the internet. It then connects with a security chain and uses ICAP to interact with the Glasswall CDR Platform. Any files that don’t match the known-good manufacturer’s specification are restored by the Glasswall Platform using our patented ISG*-compliant 4-step CDR process. Potentially malicious active content is removed, and a brand-new file is created, with a visually identical copy of the original file being returned to the Palo Alto Newtorks Firewall. The protected file is then returned to the firewall, via the same security chain. Thus delivering safe and secure files to the end user in seconds.
*ISG – Inspection and Sanitization Guidance standards by the National Security Agency (NSA)
Palo Alto Networks Firewall Plug-in
Learn more about proactive file protection with Glasswall CDR
