Actu
Webroot Strengthens Enterprise Protection with Latest BrightCloud® Threat Intelligence Solution for Palo Alto Networks
January 2016 by Marc Jacob
Webroot announced Webroot® BrightCloud® Threat Intelligence for Palo Alto Networks v1.5. The latest version will seamlessly integrate with Palo Alto Networks Next-Generation Firewall to detect and block malicious incoming IPs. Compatible with nearly any Palo Alto Networks firewall, collective, real-time BrightCloud threat intelligence can be deployed in a series of virtual environments to deliver highly accurate and timely threat data to enterprises.
According to the Webroot 2015 Threat Brief, more than 85,000 new malicious IPs are launched every day. Since organizations can often detect malicious activity within minutes of appearance, cybercriminals change hosts and IP addresses frequently. As a consequence of this behavior, new threats emerge constantly and firewalls need accurate and timely updates.
BrightCloud Threat Intelligence for Palo Alto Networks v1.5 provides an additional layer of security at an organization’s perimeter by complementing Palo Alto Networks native firewall functionality with real-time BrightCloud IP Threat Intelligence. New features for v1.5 include:
• IP Threat Blocking and Classification: A new reporting feature provides granular details on IP threats, including threat history, geographic origin, and company-specific information. With this information, v1.5 can help determine the appropriate response or course of action, such as blocking all botnets or IPs BrightCloud classifies as malicious. To reduce risks from dynamic threats, the BrightCloud service continuously analyzes threats on individual firewall devices, comparing traffic against the latest IP threat intelligence data from Webroot. Based on threat history and the BrightCloud reputation index, users will be able to compile an IP block list composed of all malicious IPs seen anywhere on their network of firewalls.
• Whitelisting: Whitelisting allows security analysts to specify IPs that are regularly used on their network and known to them. This creates the customized intelligence that enterprises demand, without interrupting business operations.
• Future Proof Protection: v1.5 adds future-proof cybersecurity protection to support new Palo Alto firewall models: PA-3060, PA-7000, PA-7050, VM-200, VM-300 and VM-1000-HV.
