7/21/2019 Note PaloAltol

http://slidepdf.com/reader/full/note-paloaltol 1/2

1. According to Palo Alto their frewall by using multiple cores and

processors will run these checks in parallel2. The second thing is that it will not re-compile fles in order to scan

them but will scan the stream or a signature.3. hile in the Palo Alto! at the same time the routing is being done

the "irewall will scan the packet or signature or the #P$ and runthe A% scan.

&. The Palo Alto is integrated into one'. The networking is the (2 ! (ayer3

App-#) classifes *ows based on application instead o ports.

+ser-#) allows you to integrate the frewall with A)

,ontent-#) looks at the inside o the streams. )ata credit card.

 Threats /iruses. +0( fltering

Policy reers to the normal frewall policies you create. Advantages of Single Pass.

(ow latency as you did it once.$calability as you open less threads

(ack o Proy - no need to build a whole fle to scan it.. Negatives.

4ail works badly. ,an5t 6uarantine and blocking attachments will

cause them to be re-transmit.

7#P!87#P are the only ones that can be decompressed and

scanned .

7/21/2019 Note PaloAltol

http://slidepdf.com/reader/full/note-paloaltol 2/2