PaloAlto Content-ID

Content-ID

Correctly identifying the application passing through the network is only part of the obstacle IT departments face with today's Internet-centric environment. Inspecting accepted application traffic becomes the next important challenge, and one that is addressed by an modern technology called Content-ID.

Content-ID melds a uniform threat signature format, stream-based scanning and a superior URL database with elements of application visibility to limit unauthorized file transfers, find and block a wide range of threats and control non-work related web surfing.

• High performance threat prevention is allowed through several innovative functions including:
• Uniform threat signature format: Rather than use a separate set of signatures for each type of threat, Content-ID leverages a uniform threat signature format to detect and block a wide range of malware including viruses, spyware, and vulnerability exploits in a single pass
• Stream-based virus scanning: Virus and spyware prevention is performed by the use of stream-based scanning, a technique that starts scanning as soon as the first packets of the file are received as opposed to waiting until the entire file is loaded into memory to begin scanning
• Vulnerability attack protection: Using application and protocol decoder-based analysis as well as anomaly and heuristic-based protection, Content-ID prevents network attacks on vulnerable applications and operating systems. Content-ID normalizes traffic to get rid of invalid and malformed packets, and performs TCP reassembly and IP de-fragmentation to ensure the utmost accuracy and protection despite any attack evasion techniques
• Content-ID performs URL filtering with a fully integrated, on-box URL filtering database, providing policy-based control over employee web surfing, safeguarding the enterprise from a full spectrum of legal, regulatory, productivity and resource risks
• File-transfer controls within Content-ID allows enterprises to block the flow of a various range of file types by in-depth searching within the payload to identify the file type (as opposed to looking only at the file extension). File blocking by type within Content-ID complements the ability to control file transfer functionality within some of the applications identified by App-ID. The result is more granular control over file-based content moving in and out of the network

The application visibility and control delivered by App-ID, combined with the comprehensive threat prevention allowed by Content-ID means that IT departments can make an important step forward in the search to retain control over the application traffic – and any related threats passing through their network.

Datasheets:

• Content-ID

For a technical consultant to call you click here and they will do so at the time you specify. If you are looking for a quotation or need help designing your solution then click here. If you require access to our SECURE online catalogue then click here.