Log In | Sign Up
Palo Alto Networks VM-100
The VM-Series supports the exact same next-generation firewall and advanced threat prevention features available in our physical form factor appliances, allowing you to safely enable applications flowing into, and across your private, public and hybrid cloud computing environments.
Automation features such as VM monitoring, dynamic address groups and a REST-based API allow you to proactively monitor VM changes dynamically feeding that context into security policies, thereby eliminating the policy lag that may occur when your VMs change.
Palo Alto Networks VM-100
Palo Alto Networks VM-Series |
||
Palo Alto Networks VM-100 |
#PAN-VM-100 |
|
Palo Alto Networks VM-100 Enterprise, quantity 25 |
#PAN-VM-100-ENT |
|
GlobalProtect Portal license, VM-100, not required if running 7.0 or higher PAN OS version |
#PAN-GP-VM-100-PORTAL |
|
GlobalProtect subscription |
||
GlobalProtect subscription year 1, VM-100 |
#PAN-VM-100-GP |
|
GlobalProtect subscription, year 1, renewal |
#PAN-VM-100-GP-R |
|
GlobalProtect subscription, 3 year, VM-100 |
#PAN-VM-100-GP-3YR |
|
GlobalProtect subscription, 3 year, renewal, VM-100 |
#PAN-VM-100-GP-3YR-R |
|
GlobalProtect subscription, 5 year, VM-100 |
#PAN-VM-100-GP-5YR |
|
GlobalProtect subscription, 5 year, renewal, VM-100 |
#PAN-VM-100-GP-5YR-R |
|
Threat prevention subscriptions |
|
|
Threat prevention subscription, year 1, VM-100 |
#PAN-VM-100-TP |
|
Threat prevention subscription, year 1, renewal, VM-100 |
#PAN-VM-100-TP-R |
|
Threat prevention subscription, 3 year, VM-100 |
#PAN-VM-100-TP-3YR |
|
Threat prevention subscription, 3 year, renewal, VM-100 |
#PAN-VM-100-TP-3YR-R |
|
Threat prevention subscription, 5 year, VM-100 |
#PAN-VM-100-TP-5YR |
|
Threat prevention subscription, 5 year, renewal, VM-100 |
#PAN-VM-100-TP-5YR-R |
|
PANDB URL filtering subscriptions |
|
|
PANDB URL filtering subscription, VM-100 |
#PAN-VM-100-URL4 |
|
PANDB URL filtering subscription renewal, VM-100 |
#PAN-VM-100-URL4-R |
|
PANDB URL filtering subscription, 3 year, VM-100 |
#PAN-VM-100-URL4-3YR |
|
PANDB URL filtering subscription 3 year renewal, VM-100 |
#PAN-VM-100-URL4-3YR-R |
|
PANDB URL filtering subscription, 5 year, VM-100 |
#PAN-VM-100-URL4-5YR |
|
PANDB URL filtering subscription, 5 year, renewal, VM-100 |
#PAN-VM-100-URL4-5YR-R |
|
WildFire subscriptions |
|
|
WildFire subscription, VM-100 |
#PAN-VM-100-WF |
|
WildFire subscription renewal, VM-100 |
#PAN-VM-100-WF-R |
|
WildFire subscription 3 year, VM-100 |
#PAN-VM-100-WF-3YR |
|
WildFire subscription 3 year renewal, VM-100 |
#PAN-VM-100-WF-3YR-R |
|
WildFire subscription 5 year, VM-100 |
#PAN-VM-100-WF-5YR |
|
WildFire subscription 5 year renewal, VM-100 |
#PAN-VM-100-WF-5YR-R |
|
Premium support |
||
Premium support year 1, VM-100 |
#PAN-SVC-PREM-VM-100 |
|
Premium support year 1 renewal, VM-100 |
#PAN-SVC-PREM-VM-100-R |
|
Premium support 3-year prepaid, VM-100 |
#PAN-SVC-PREM-VM-100-3YR |
|
Premium support 3-year prepaid renewal, VM-100 |
#PAN-SVC-PREM-VM-100-3YR-R |
|
Premium support 5 year prepaid, VM-100 |
#PAN-SVC-PREM-VM-100-5YR |
|
Premium support 5 year prepaid renewal, VM-100 |
#PAN-SVC-PREM-VM-100-5YR-R |
|
As your organization embraces virtualization and cloud initiatives, your networking, security and virtualization teams have two alternatives when it comes to protecting the resident mission-critical applications and data from modern cyber threats. The first alternative is to ignore security all together, not because it is unnecessary, but because security policy deployment cannot keep pace with the rate of virtualization changes, oftentimes lagging weeks behind.
The second alternative is to implement traditional security technologies that are port-bound, which means they lack the ability to identify and control applications, and they are ineffective at blocking today's modern attacks. Neither of these alternatives address the critical requirements you need to protect your virtualized environments. Key requirements for virtualized security include:
.Support the same next-generation firewall features across both physical and virtual form factors
.Automate the deployment of next-generation firewalls and policies across a range of virtualization environments
.Isolate and segment mission critical applications and data following Zero Trust principles
.Stop cyber threats from moving laterally in an east-west manner
.Deliver centralized visibility and policy management for both physical and virtual form factors
The Palo Alto Networks VM-Series combines next-generation firewall security and advanced threat prevention to protect your virtualized environments from advanced cyber threats. Native automation tools such as Virtual Machine monitoring (VM) and Dynamic Address Groups monitor VM additions, removals and attribute changes to help eliminate any security policy lag as your VMs change.
Applying next-generation security to virtualized environments
The VM-Series virtualized firewall is based upon the same full-stack traffic classification engine that can be found in our physical form-factor firewalls. The VM-Series natively classifies all traffic, inclusive of applications, threats and content, and then ties that traffic to the user. The application, content, and user — the elements that run your business — are then used as the basis of your virtualized security policies, resulting in an improved security posture and a reduction in incident response time.
Isolate mission critical applications and data using Zero Trust principles
Security best-practices dictate that your mission-critical applications and data should be isolated in secure segments using Zero Trust (i.e. never trust; always verify) principles at each segmentation point. The VM-Series can be deployed throughout your virtualized environment, residing as a gateway within your virtual network and controlling VM-to-VM communications based on application and user identity. This allows you to control the applications traversing your virtualized environment, while blocking potentially rogue or misconfigured applications and controlling access based on user identity.
Block lateral movement of cyber threats
Today’s cyber threats will commonly compromise an individual workstation or user, and then they will move across the network, looking for a target. Within your virtual network, cyber threats will move laterally from VM-to-VM, in an east-west manner, placing your mission critical applications and data at risk. Exerting application-level control using Zero Trust principles in between VMs will reduce the threat footprint while applying policies to block both known and unknown threats.
Automated, transparent deployment and provisioning
A rich set of automation features and APIs allow customers to streamline their security policy deployment so that security keeps pace with the buildup and teardown of their virtualized mission-critical applications.
Virtual Machine monitoring: Security policies must be able to monitor and keep up with changes in the virtualization environment, including VM attributes and the addition or removal of VMs. Virtual Machine monitoring (i.e. VM monitoring) automatically polls your virtualization environments for virtual machine inventory and changes, collecting this data in the form of tags that can then be used in dynamic address groups to keep policies up to date.
Dynamic address groups: As your virtual machines change functions or move from server to server, building security policies based on static data, such as IP address, delivers limited value. dynamic address groups allow you to create policies using tags [from VM monitoring] as an identifier for virtual machines instead of a static object definition. Multiple tags representing virtual machine attributes such as operating system can be resolved within a dynamic address group, allowing you to easily apply policies to virtual machines as they are created or travel across the network.
RESTful APIs: A flexible, REST-based API allows you to integrate with 3rd party cloud orchestration solutions such as OpenStack and CloudStack. This enables the VM-Series to be deployed and configured in lockstep with virtualized workloads.
Centralized management: Panorama™ allows you to manage your VM-Series deployments along with your physical security appliances, thereby ensuring policy consistency and cohesiveness. Rich, centralized logging and reporting capabilities provide visibility into virtualized applications, users and content.
Features and Benefits:
Application Visibility
Port numbers, protocols, and IP addresses are useful for network devices, but they tell you nothing about what is on your network. Detailed information about the applications, users, and content traversing your network empowers you to quickly determine any risks they pose and quickly respond. Leveraging the rich context provided by Palo Alto Networks firewalls, our visualization, analysis, and reporting tools let you quickly learn more about activity on your network and analyze incidents from a current or comparative perspective.
User Visibility
Traditionally, security policies were applied based on IP addresses, but the increasingly dynamic nature of users and applications mean that IP addresses alone have become ineffective as a policy control element for safe application enablement.
AntiVirus
The broadening use of social media, messaging and other non-work related applications introduce a variety of vectors for viruses, spyware, worms and other types of malware. Palo Alto Networks next-generation firewalls allow you to block unwanted applications with App-ID, and then scan allowed applications for malware.
IPS
Today's attacks on your network use a combination of application vectors and exploits. Palo Alto Networks next-generation firewalls arm you with a two-pronged approach to stopping these attacks. Unwanted applications are blocked through App-ID, and the applications you choose to allow through are scanned for vulnerability exploits by our NSS-
approved IPS engine.
Data Filtering & File Blocking
The application function level control, file blocking by type, and data filtering features of our next-generation firewalls allow you to implement a range of policies that help balance permitting the use of personal or non-work related applications, with the business and security risks of unauthorized file and data transfer.
Modern Malware Protection
Modern attackers are increasingly using targeted and new unknown variants of malware to sneak past traditional security solutions. To address this, Palo Alto Networks developed WildFire, which identifies new malware in minutes. By executing suspect files in a virtual environment and observing their behavior, Palo Alto Networks identifies malware quickly and accurately, even if the malware sample has never been seen before. Once a file is deemed malicious, WildFire automatically generates protections that are delivered to all WildFire subscribers within an hour of detection. A WildFire license provides your IT team with a wealth of forensics to see exactly who was targeted, the application used in the delivery, and any URLs that were part of the attack.
URL Filtering
The perfect complement to the policy-based application control provided by App-ID is our on-box URL filtering database, which gives you total control over related web activity. By addressing your lack of visibility and control from both an application and web perspective, App-ID and URL Filtering together protect you from a full spectrum of legal, regulatory, productivity, and resource utilization risks.
Mobile Security
Mobile devices are a part of nearly every modern network. As a result, security teams need to deliver protection and policy enforcement to a myriad of new devices and applications. The Palo Alto Networks next-generation firewall extends comprehensive application visibility and control and vulnerability protection to mobile devices.
Contact Us
Mail Us
suresh@tracenetworksolutions.com
