Focus

What's New in the NetSec Platform

Advanced Threat Prevention: Support for Zero-day Exploit Prevention

Table of Contents

Advanced Threat Prevention: Support for Zero-day Exploit Prevention

Advanced Threat Prevention now provides real-time detection and prevention of command injection and SQL injection vulnerabilities to protect users against zero-day threats.

Palo Alto Networks now operates new inline deep learning detection engines in the Advanced Threat Prevention cloud to analyze traffic for command injection and SQL injection vulnerabilities in real-time to protect users against zero-day threats. This also includes signature-based prevention for thousands of known vulnerabilities and industry-leading response times for critical and high CVEs for top vendors.

By operating cloud-based detection engines, you can access a wide array of detection mechanisms that are updated and deployed automatically without requiring the user to download update packages or operate process intensive, firewall-based analyzers which can sap resources. Inline cloud analysis operates under your Vulnerability Protection profile and supports two analysis engines upon initial release: SQL injection and Command injection. Additional analysis models are delivered through content updates, however, enhancements to existing models are performed as a cloud-side update, requiring no local update process. Inline cloud analysis is enabled and configured using the Vulnerability Protection profile and requires an active Advanced Threat Prevention license.

Advanced Threat Prevention (ATP) Support on CN-Series Firewall

App Acceleration Support for Additional Apps