{"id":112650,"date":"2020-06-17T04:55:32","date_gmt":"2020-06-17T11:55:32","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=112650"},"modified":"2020-07-09T13:50:45","modified_gmt":"2020-07-09T20:50:45","slug":"network-pan-os-10-0","status":"publish","type":"post","link":"https:\/\/www2.paloaltonetworks.com\/blog\/2020\/06\/network-pan-os-10-0\/","title":{"rendered":"Paradigm Shift: The World\u2019s First ML-Powered NGFW with PAN-OS 10.0"},"content":{"rendered":"<p><span style=\"font-weight: 400\">Over the last 10 years, the network security industry has focused on reducing the time it takes to react to new attacks. The time required to create a signature and update all network security systems with it has been reduced from weeks to days to hours, and in our case, even to minutes. However, cybercriminals don't stay still. Attacks are continuously and automatically morphing and evading signature based detection techniques.<\/span><\/p>\n<p><span style=\"font-weight: 400\">New IoT devices are being added to your network and their numbers are increasing rapidly without notice. Waiting for fingerprints to be created in order to identify and secure each new IoT device is yet another reactive technique that creates an unacceptable gap in your security.<\/span><\/p>\n<p><span style=\"font-weight: 400\">To add to this complexity, enterprise networks are widening \u2013 with hybrid clouds, IoT devices and a remote workforce \u2013 and increasing the attack surface. It simply isn't possible for security administrators to keep security policy changes up to date fast enough using manual methods.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Reactive security can\u2019t keep up. A paradigm shift in cybersecurity is needed. Network security needs to become proactive. The world needs a new type of Next-Generation Firewall (NGFW) that:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Helps stop new threats by embedding machine learning (ML) in the core of the firewall to provide real-time signatureless attack prevention. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Identifies new IoT devices with ML and behavior-based identification, removing the dependence on fingerprints.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Uses cloud-based CPU- and data-intensive ML processing to detect the most sophisticated attacks in near real time.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW to stop attacks and reconfigure policies.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Continuously collects telemetry to enable cloud-based CPU and data intensive ML processes, which then recommends policy changes to optimize security utilization and outcomes.<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><b>Introducing the World\u2019s First ML-Powered NGFW<\/b><\/h2>\n<p><span style=\"font-weight: 400\">Today, Palo Alto Networks disrupts the industry once again by introducing the world\u2019s first ML-Powered Next-Generation Firewall. This is a paradigm shift in network security that enables you to stay ahead of unknown threats, see everything, including IoT, and reduce errors with automatic policy recommendations.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2><b>How Machine Learning Delivers Stronger Cybersecurity\u00a0<\/b><\/h2>\n<h4>Prevent<span style=\"font-weight: 400\">:<\/span><\/h4>\n<p><strong>ML-Based Inline Malware and Phishing Prevention<\/strong><\/p>\n<p><span style=\"font-weight: 400\">Trying to reduce the time it takes to create and distribute new signatures to combat attacks that use machines and automatically morph is unproductive. In a completely new approach, our ML-Powered NGFW uses machine learning models to identify variants of known attacks as well as many unknown cyberthreats so you are able to prevent up to 95% of zero-day malware inline.\u00a0<\/span><\/p>\n<p><strong>Zero-Delay Signature Updates<\/strong><\/p>\n<p><span style=\"font-weight: 400\">With this release, we\u2019re introducing near-real-time protection with zero-delay signature updates.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h4>Detect<span style=\"font-weight: 400\">:<\/span><\/h4>\n<p><strong>ML-Based Integrated IoT Security\u00a0<\/strong><\/p>\n<p><span style=\"font-weight: 400\">To keep your network fully protected, every new <a href=\"https:\/\/start.paloaltonetworks.com\/unit-42-iot-threat-report\">IoT device<\/a> added needs to be manually monitored, and your network security must be updated with that device\u2019s fingerprint. During the time it takes to identify devices and make updates to the network, your organization is at risk. The <\/span><a href=\"https:\/\/paloaltonetworks.com\/network-security\/iot-security\"><span style=\"font-weight: 400\">new IoT Security subscription<\/span><\/a><span style=\"font-weight: 400\"> for the NGFW provides complete device visibility, behavioral anomaly detection and native enforcement to <a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/06\/network-iot-security\">secure IoT devices<\/a> without the need for additional sensors or infrastructure.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h4>Improve<span style=\"font-weight: 400\">:<\/span><\/h4>\n<p><strong>ML-Based Security Policy<\/strong><\/p>\n<p><span style=\"font-weight: 400\">As it collects a wide variety of telemetry information from the network, the ML-Powered NGFW will recommend appropriate security policies. With PAN-OS 10.0 and IoT Security, customers will be able to view and adopt the IoT Security policy recommendations for safe device behavior. This will save time, reduce the chance of human error and help secure IoT devices.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2><b>Additional Innovations in PAN-OS 10.0<\/b><\/h2>\n<p><span style=\"font-weight: 400\">In addition, PAN-OS 10.0 introduces the <\/span><a href=\"https:\/\/paloaltonetworks.com\/network-security\/cn-series\"><span style=\"font-weight: 400\">CN-Series<\/span><\/a><span style=\"font-weight: 400\">, the industry\u2019s first ML-powered, <a href=\"https:\/\/www.paloaltonetworks.com\/blog\/2020\/06\/network-cn-series\/\">next-generation firewall built specifically for Kubernetes<\/a> environments to provide security and compliance for your Kubernetes container environment.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Every single security service has been enhanced, including Snort support in Threat Prevention, new DNS Security categories with deep visibility, and more.<\/span><\/p>\n<p><span style=\"font-weight: 400\">I continually hear from our customers that they love our forward-looking approach in anticipating their cybersecurity needs. The 70+ innovative new capabilities in this release, including easier decryption, high availability clustering and a new high-performance hardware card redefine the standard for network security so you don\u2019t just keep up but stay ahead.<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><\/p>\n<p><span style=\"font-weight: 400\">Welcome to the era of intelligent security \u2013 protecting your enterprise from the threats of tomorrow. Learn more about <\/span><a href=\"https:\/\/paloaltonetworks.com\/products\/new\/pan-os\"><span style=\"font-weight: 400\">PAN-OS 10.0<\/span><\/a><span style=\"font-weight: 400\">. <\/span><span style=\"font-weight: 400\">\u00a0<\/span><\/p>\n<p>&nbsp;<\/p>\n<h5><\/h5>\n<h5><strong>Intelligent Network Security: LinkedIn Live Broadcast.<\/strong><\/h5>\n<p><span style=\"font-weight: 400\">AJ Shipley, vice president of product, and Paul Calatayud, Americas CSO, appeared on LinkedIn Live to answer questions about the industry\u2019s first ML-Powered NGFW. <\/span><a href=\"https:\/\/www.linkedin.com\/video\/live\/urn:li:ugcPost:6681933905844584448\/\" rel=\"nofollow,noopener\" ><span style=\"font-weight: 400\">Watch the event on-demand<\/span><\/a><span style=\"font-weight: 400\">.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A paradigm shift in cybersecurity is needed. The world\u2019s first ML-powered NGFW with PAN-OS 10.0 introduces more than 70 innovative new capabilities.<\/p>\n","protected":false},"author":208,"featured_media":112724,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[6765],"tags":[1815,6182,4321,810,111,758],"coauthors":[2224],"class_list":["post-112650","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-secure-the-enterprise","tag-firewall","tag-iot-security","tag-machine-learning","tag-network-security","tag-ngfw","tag-pan-os","net_sec_category-next-generation-firewalls"],"jetpack_featured_media_url":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-content\/uploads\/2020\/06\/Sapporo_Event_Social_NGFW_1200x628_Responsive.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/users\/208"}],"replies":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/comments?post=112650"}],"version-history":[{"count":10,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112650\/revisions"}],"predecessor-version":[{"id":113614,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/posts\/112650\/revisions\/113614"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media\/112724"}],"wp:attachment":[{"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/media?parent=112650"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/categories?post=112650"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/tags?post=112650"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www2.paloaltonetworks.com\/blog\/wp-json\/wp\/v2\/coauthors?post=112650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}