PaloAlto Cortex XDR Deployment

This service is designed to transform and optimize Layer 3 and Layer 4 security policies into advanced Layer 7 (App-ID) configurations on Palo Alto Networks devices already deployed in the customer’s AWS infrastructure. Focused on maximizing the performance of existing policies, it does not include design or architecture, ensuring a quick and efficient implementation.

What does the service include?

Advanced Configuration: Activation of App-ID, SSL decryption, QoS, and enabling of User-ID with identification sources (802.1x, RADIUS, LDAP, or XML API).

Policy Optimization: Migration of port-based rules to application-based rules. Custom configuration of Group Mapping and review of security rules based on customer needs.

Filtering and Protection: Deployment of SSL decryption policies for high-risk categories and content filtering using PANDB, including blocking critical categories.

Key Benefits

Better Visibility and Control: Active monitoring of traffic with session decryption and log validation.

Enhanced Protection: Enabling of Content-ID and recommendations for antivirus and antispyware profiles.

Guided Implementation: Up to 4 remote training sessions (4 hours each) to ensure correct usage and maintenance of the system.

This service is available exclusively for Palo Alto Networks devices already deployed on the customer’s network. The delivery includes detailed documentation of the changes made, ensuring a smooth transition focused on strengthening the security of your AWS environment.