Palo Alto Networks Launches Private Cloud Option for APT Protection

Network security firm Palo Alto Networks this week launched a new appliance that provides enterprises with a private cloud solution for detection, analysis and prevention of advanced persistent threats (APTs).

Designed for customers that have restrictions on the usage of public cloud solutions, the Palo Alto Networks WF-500 appliance offers the same sandbox detection and analysis capabilities available in its public cloud based WildFire subscription offering on a customer-owned platform.

Originally launched in November 2011, Palo Alto Networks’ WildFire service aggregates suspicious files flagged by its next-generation firewalls deployed at customer locations around the world. Once flagged as suspicious, the files are uploaded for analysis by Palo Alto Networks systems and staff. In the event a file is determined to be malware or an APT, a signature is generated and automatically sent to WildFire customers’ firewalls to provide protection.

The WF-500 appliance offers the same advantages on an appliance that is deployed inside a customer’s network, the company said. Through this deployment model, customers are able to detect, analyze, and mitigate suspected threats in a private cloud under their control. Customers also have the option of sharing their findings with or receiving updated malware signatures from the WildFire cloud service.

“These malware-analysis private clouds provide a central analysis device and interact with enforcement points throughout the network,” explained Securosis Analyst and President Mike Rothman in a recent blog post. “This provides the leverage of not having to deploy NBMD devices at all ingress points, as well as facilitating internal sharing of intelligence.”

When deployed with an inline Palo Alto Networks next-generation firewall, the WF-500 also offers full prevention capabilities, the company said.

The Palo Alto Networks WF-500 appliance is available now.