PaloAlto App-ID

App-ID

So as to bring application visibility and control back to the IT department, Palo Alto Networks started with a plain sheet of paper, designing a traffic classification technology to exactly recognize the applications passing through the network. The result is App-ID™, a patent-pending traffic classification technology that allows administrators to establish accurately which applications are running on their network, no matter of port, protocol, SSL encryption, or evasive tactic employed. In the past, if an unapproved or non-work-related application was found on the corporate network, it was summarily deleted or blocked. Now, the remove or block as the default reaction may not be suitable due to the widespread use (often at the executive level) of these applications and their impending business advantages.

A more realistic approach is to weigh the business effect against the security risks and in order to do that, administrators require to know more about the application. Using the application identity and description generated by App-ID, as well as the application behavioural characteristics, the respective categories and subcategories and its underlying technology, administrators are allowed to make more knowledgeable conclusions on how to treat an application passing through the network.

With enhanced visibility into the identity and behaviour of the application, administrators can employ superior, policy-based application usage control for both inbound and outbound network traffic. With App-ID, IT can now:

• Improve network visibility by accurately identifying application traffic irrespective of port and protocol
• Enhance security by dictating access rights based upon the actual application traffic as opposed to simply the port and protocol
• Increase malware threat detection and prevention effectiveness

While traditional port-based approaches use a single classification procedure to identify traffic, App-ID goes further than any other network security technology on the market, using many classification techniques to exactly identify the application, even those that use evasive tactics such as SSL encryption, port hopping and emulation. App-ID observes all of the traffic traversing the firewall, with several of these techniques – containing application protocol detection and decryption, application protocol decoding, application signatures, and heuristic analysis – to speedily identify the specific application connected with each packet stream.

Datasheets:

• App-ID

For a technical consultant to call you click here and they will do so at the time you specify. If you are looking for a quotation or need help designing your solution then click here. If you require access to our SECURE online catalogue then click here.