Overview
Explore
Expertise
Ecosystem
What's popular
PAN-OS and EDLs - Everything You Wanted to Know about External Dynamic Lists
Looking to implement external dynamic lists in your Palo Alto NGFW or Prisma Access? This post will answer all your questions about how EDLs work in PAN-OS to dynamically improve your security posture.
Palo Alto Networks Next-Generation Firewall (NGFW)
Learn the basics about network security and how next-generation firewalls (NGFW) fits in and establish a baseline knowledge to help aid you through the Next-Generation Firewall learning paths. Throughout this learning path you will learn network security, tools and techniques used to help secure your network, and how the NGFW fits into your security requirements. You will have the opportunity to explore these concepts that will help you walk the NGFW learning path with ease and comfort to aid you on your successful journey of learning NGFW! Now let's get started!
What is the Prisma Access Browser
The Prisma Access Browser, a custom Chromium-based browser by Palo Alto Networks, integrates advanced security services to offer seamless, robust protection. It validates users, limits access based on roles and eliminates the need for cumbersome VPNs, making it an ideal solution for modern, flexible work environments.
Introduction to XQL: Writing Your First Query
Learning a new programming or query language can be daunting, but if you've used the boolean options in a web search engine before, you can master XQL queries in no time. Like with web searches, we start with a hypothesis of our search, add filters to limit our results, and then validate the results that are returned against our hypothesis.
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
What's new
The Grizzled CyberVet's Tactical Plan: Mapping Palo Alto Networks to MITRE ATT&CK
Next up in the Grizzled CyberVet series: A global enterprise faces a full-scale cyberattack spanning every stage of the MITRE ATT&CK framework. Armed with Palo Alto Networks' full security platform, they stop the threat at every turn. Learn how a unified security strategy can outmatch attackers before they succeed. Read on to see it in action!
The Grizzled CyberVet: How Palo Alto Networks Powers End-to-End Cyber Defense
Fragmented security solutions create inefficiencies and vulnerabilities. This article explores how Palo Alto Networks' integrated platform addresses these gaps, breaking the cybersecurity kill chain at every stage. By consolidating security functions, organizations enhance threat prevention, streamline operations and reduce costs. Learn how a unified approach strengthens defenses and why proactive security is essential for business resilience.
Introduction to XQL: Building Your First Widget
Widgets transform XQL query results into interactive visualizations, aiding SOC analysts in identifying trends and anomalies. This article demonstrates using widgets to graph failed GlobalProtect logins, helping detect brute-force attacks and misconfigurations, and providing proactive assistance to users.
Why Should I Use Variables in Panorama?
Panorama allows an admin to configure device-specific options for a firewall from a central source. Templates allow an admin to consolidate the configurations for multiple firewalls
SSE and SASE Market Scan Workshop
This workshop is designed to help organizations with their decision making for their next-generation network and security architecture.
The Grizzled CyberVet: State of Network Security
Network security has evolved rapidly, with the field now embracing zero trust, AI-driven defenses and integrated platforms. The next five years will see AI, SASE and quantum-resistant cryptography reshape the landscape. Enterprises must consolidate tools, adopt AI automation and prioritize identity-first security to stay ahead of increasingly sophisticated cyber threats. Secure your future now.
Operationalizing Threat Intelligence with Cortex: A Maturity Model for SOCs
Transforming raw data into actionable intelligence is crucial for cybersecurity. This article explores the stages of operationalizing threat intelligence, from basic ingestion to fully automated, proactive security operations, using Cortex TIM. Learn how to enhance your SOC's capabilities, reduce manual effort and shift from reactive to proactive defense.
Palo Alto Cortex XDR Proving Ground Lab
WWT's ATC Palo Alto Cortex XDR Proving Ground Lab provides a consolidated solution built around Cortex XDR, the Palo Alto firewall, Windows endpoints and Windows servers to demonstrate how the Cortex XDR Agent protects against threats. The goal of Cortex XDR is to increase the operational efficiency of the security operations center. Cortex XDR accomplishes this by reducing alerts by combining similar events, stitching together logs from different sources and preventing as many threats as possible early in the attack cycle. Cortex XDR goes beyond the traditional EDR approach of using only endpoint data to identify and respond to threats by applying machine learning across all your enterprise, network, cloud and endpoint data. This approach enables you to quickly find and stop targeted attacks, insider abuse and remediate compromised endpoints. Cortex XDR combines functionality from Endpoint Protection, Endpoint Detection and Response, Network Traffic Analysis and User Behavior Analytics into a single console. This lab consists of servers running common applications that include Palo Alto Cortex XDR, Palo Alto Cortex XSOAR, Palo Alto VM-Series firewall, Active Directory, Windows IIS and SQL server, and several Windows 10 workstations. You will access the environment using a Windows-based jump host from which you can browse web consoles and open RDP/SSH sessions.
Palo Alto Networks Next-Generation Firewall (NGFW)
Learn the basics about network security and how next-generation firewalls (NGFW) fits in and establish a baseline knowledge to help aid you through the Next-Generation Firewall learning paths. Throughout this learning path you will learn network security, tools and techniques used to help secure your network, and how the NGFW fits into your security requirements. You will have the opportunity to explore these concepts that will help you walk the NGFW learning path with ease and comfort to aid you on your successful journey of learning NGFW! Now let's get started!
Palo Alto NGFW Foundations Version 11 Lab
The Palo Alto NGFW Foundations Lab is a capability of the Advanced Technology Center (ATC) designed to provide an environment to gain hands-on experience with the fundamental features of Palo Alto's solution. The environment that supports the lab is completely virtual, removing any hardware dependencies associated with physical infrastructure.
Palo Alto NGFW Intermediate Version 10 Lab
The Palo Alto NGFW Intermediate Lab is a hand-on virtual environment where you'll be able to complete the exercises you see in the Intermediate learning path as well as several new practicals. The Intermediate lab focuses on tasks like SSL Decryption, URL Filtering, and DNS Tunneling. Just like the Foundations lab, the Intermediate lab is built upon the same infrastructure. While there is a guide that you can follow along with, you can also explore the environment and test any configuration you'd like.
Driving Innovation Together — Palo Alto Networks 2024 Partner Awards
Palo Alto: Our partners are instrumental in helping us stay ahead of threats and deliver cutting-edge security solutions to protect our customers' digital transformation journeys.
Partner POV | Understanding and Leveraging the Role of Platformization in AI-First Cybersecurity
The convergence of cybersecurity and AI is reshaping defenses and attacks alike. Platformization, integrating multiple tools into a unified system, offers a solution to manage complexity and enhance security. Palo Alto Networks' Precision AI exemplifies this approach, providing robust, automated, and contextually aware cybersecurity solutions for modern threats.
SD-WAN Technology Briefing
Software-defined WAN offers organizations flexible connectivity, facilitates cloud strategies and improves application performance, all in a secure environment. It also can improve operational efficiencies and help control or reduce WAN costs.
Approaches to SD-WAN implementation and supported capabilities vary from one OEM to another. This briefing will explore four of the top SD-WAN vendors and highlight the innovative features that set each of their solutions apart, including a live demonstration of our on-demand SD-WAN lab environments and explanation of how to access them.
Proactive User Experience with ADEM
ADEM, or Autonomous Digital Experience Management, is a tool integrated within Palo Alto Networks' SASE offering, available on Prisma SD-WAN or Prisma Access Users. ADEM provides a comprehensive understanding of network issues before they escalate into problems. With ADEM, the days of struggling to resolve tickets stating "I cannot connect" are over.
Campus and Branch Briefing
Organizations depend on their campuses and branches not only as operational hubs but as vital touchpoints for employees and customers. A poor experience at these locations can erode brand trust, while a seamless, technology-driven experience enhances productivity, satisfaction, and loyalty. With the campus and branch increasingly reliant on robust networks, the stakes for getting it right have never been higher
Accelerating URL Filtering with AI/ML
Traditional URL filtering security measures no longer keep up with the attacker landscape and, as such, are no longer effective by themselves. With the rise of automation and its ease of access, attackers are now leveraging these techniques to cast wider and wider nets looking for victims. Like all security, you are no longer safe being a part of the herd; because of this, you also need to utilize automation by way of Machine Learning and AI tools to keep up with the ever-transforming landscape out there. This is where Palo's new range of "Advanced" Security Services comes in.
Integrating 5G into SASE with Prisma SD-WAN
SD-WAN service can be integrated with an SSE to form a SASE solution. In this article, we will discuss how Palo Alto Networks has added the ability to leverage newer 5G wireless circuits with Prisma SD-WAN, which can offer the same internet speeds without the added cost of installing dedicated hardware for the connections.
Introduction to XQL: Writing Your First Correlation Rule
Correlation Rules in Cortex XDR and XSIAM are how we can use XQL queries to detect patterns, anomalies or sequences of activities that could indicate malicious behavior, even when each individual event might not appear suspicious on its own. Correlation Rules typically leverage data from multiple datasets, but for our example, we'll keep it simple to alert on failed login attempts to a NGFW, and build on the query later.
How can Remote Browser Isolation Help
Protecting critical information from accidental disclosure or preventing phishing attacks against high-value targets is very difficult. Palo Alto Networks Remote Browser Isolation is an add-on to Prisma SASE to shift the risk to a secure cloud-hosted environment while providing a near-seamless experience for the end-user.