Focus

What's New in the NetSec Platform

Advanced Threat Prevention (ATP) Support on CN-Series Firewall

Table of Contents

Advanced Threat Prevention (ATP) Support on CN-Series Firewall

CN-Series firewalls now support real-time Advanced Threat Prevention (ATP) for detecting malware and zero-day vulnerability exploits.

CN-Series firewall now supports real-time Advanced Threat Prevention (ATP) for detecting malware and zero-day vulnerability exploits using the advanced ML engines in the cloud. The CN-Series ATP is delivered as a containerized solution for high scalability and low-latency cloud-native service.

The ATP feature is supported on PAN-OS 11.0 and later releases and all CN-Series deployment modes: deploying the CN-Series firewall as a Kubernetes service, Daemonset, and a Kubernetes CNF. For the ATP feature, you need the Advanced Threat Prevention licenses and enable the Inline Cloud Analysis.

To enable the CN-Series ATP feature, you can use the YAML files from the Palo Alto Networks CSP for deploying the containerized firewall pods or enable the ATP feature while configuring the CN-Series deployment on the Palo Alto Customer Service Portal (CSP).

Advanced DNS Security

Advanced Threat Prevention: Support for Zero-day Exploit Prevention