Supported Devices

Features of Palo Alto PA Series and Palo Alto VM-Series

Next-Generation Firewall for Multi-Level Defense with One Device

Visualize Communication and Usage by On-Box Reports

Feature Overview

Threat Protection

Protects the system from known threats such as viruses, spyware, and vulnerability attacks.

Detect and Protect Communications by Threat Protection Options
The Anti-virus and anti-spyware feature detects and protects communications suspected of being viruses or spyware, and the anti-vulnerability feature detects attack suspected of targeting vulnerabilities.

Advantage of the UTM Function of the Next-Generation Firewall
Using the UTM function of the conventional firewall may severely degrade performance. However, Palo Alto Networks' Next-Generation Firewalls offer threat protection features that use the software architecture (single-pass method) to reduce performance degradation.

WildFire (Sandbox)

Detects and protects against unknown threats in sandboxes that cannot be prevented by traditional measures such as anti-virus, IPS, and URL filtering.

Share Maximum Threat Information in Cloud-based Sandboxes
A sandbox in the cloud allows you to maximize the sharing of information about threats while minimizing the hardware requirements. The signatures to be distributed are also generated from files transferred from WildFire users worldwide. Quickly recognize and protect against unknown threats.

Generate Anti-Threat Signature to Collaborate with Threat Protection
If it is determined to be malware, an anti-virus signature is automatically generated and delivered to your device within an hour. The delivered signature is reflected in the settings of the anti-virus, IPS signature, and URL filtering functions to detect and protect against the latest threats.

Generate Forensic Reports
Administrators can view the file information, session information, and file runtime behavior results on the portal site. Also, the portal site provides detailed information about which users have been targeted and what applications have been utilized.

Application Identification (App-ID)

Identify, visualize, and control applications regardless of the port, protocol, SSL encryption, or detection avoidance action. For example, an application using the same port can be identified, visualized, and controlled while port 80 is permitted.

Please take a look at the website of Palo Alto Networks for the latest information about applications that PA series can identify.

User Identification (User-ID)

By linking with Microsoft's Active Directory servers, you can identify who is using which applications. This allows you to set up, visualize, and control applications that are permitted and prohibited for each department or user.

Features of FortiGate Appliances/ FortiGate -VM

Variety of Security Functions for a Good Value of the Price

Performance of Fortinet's FortiGate appliances

Feature Overview

Anti-Malware (Optional Feature)

In addition to Anti-Virus, Intrusion Protection, and Web Filtering, the Email Filtering function is provided centrally for multiple levels of defense.

• Anti-malware options include anti-virus, intrusion protection, web filtering, and Email filtering.

Anti-Malware
Detects and removes viruses and spyware from SMTP, POP3, FTPs, IMAP, HTTP, and IMs to prevent intrusions into the company.

Intrusion Protection
Provides intrusion prevention (IPS) function. Protect your network from attackers by providing network-level protection.

Web Filter
Prevents access to malicious sites such as spyware/malware drive-by download sites, spam URLs, and phishing.

Email Filters
Provides email filtering capabilities. Enhance email security by tagging emails that might be spam and alerting users.

Anti-Malware (Anti-Virus) (Optional Feature)

Detects and protects against viruses and spyware traversing the FortiGate based on virus-definition files delivered from FortiGuard.

Quick Pattern File Update with Push Delivery
Virus-definition files are distributed in real-time from FortiGuard to FortiGate around the world, based on the latest viruses, spyware, and other threats information. This makes it possible to detect and protect new threats every day around the world faster.
*The average number of daily notification is four, but the number varies depending on whether threat information is updated or not.

Detection and Defense Based on Virus Behavior
In addition to the detection and protection based on the definition file, this service can protect against viruses that are not contained in the definition file by the heuristic analysis, which scans the program code of the virus code.

Anti-Malware (Intrusion Protection) (Optional Feature)

The server and clients are also protected from all forms of threats by heuristic detection that observes the behavior of communication.

• This function is included in the anti-malware option.

Rich signatures based on threat information
The FortiGate maintains a rich IPS signature that exceeds 8000 categorized by severity, target (server/client)/OS type, etc. They are kept up-to-date with information that is periodically delivered from the FortiGuard. This enables detection and defense against new attacks that occur daily around the world.

Detection and defense based on communication behavior
In conjunction with signature matching, heuristic detection protects against threats for which signatures have not been developed, based on communication behavior.

Anti-Malware (Web Filter) (Optional Feature)

The Fortigate connect to the FortiGuard in real-time to prevent spyware/malware drive-by-download sites, spam URLs, phishing, and other dangerous sites from being accessed.

Access Protection Based on Dangerous Website Information
When FortiGate detects web access, it communicates with FortiGuard for the URL or IP address information in real-time (*) and prevents access to malicious sites based on the results. Though the server location of malicious sites will be changed frequently, real-time queries can block access to those malicious sites with higher accuracy.
(*) Query results are cached for 60 minutes.

• This feature is included in the anti-malware option.