New Palo Alto Networks PAN-OS Nebula finds evasive zero-day attacks

SECURITY

Palo Alto Networks Inc. today announced Nebula, the latest upgrade of its PAN-OS software that finds evasive new attacks that can cripple organizations and stop them in their tracks.

Nebula, PAN-OS version 10.2, is pitched as a new shift in network security. The product detects so-called zero-day or unknown threats that have grown and evolved in the digital area, those that are invisible to even the latest security technologies. Palo Alto Networks argues that never-before-seen threats are evading security defenses, making it nearly impossible to detect and prevent these attacks, increasing the risk of zero-day threats.

Nebula collects, analyzes and interprets potential zero-day threats using deep learning in real time, a claimed industry first. The use of deep learning is said to result in six times faster prevention with 48% more evasive threats detected, surpassing anything previously possible.

The release also introduces new artificial intelligence operations while enhancing advanced threat prevention, “internet of things,” domain name services and URL-related security services. Nebula adds inline deep learning and harnesses the processing power of the cloud to provide enhanced protection.

Features in the release include a new Intrusion Protection System that brings security analysis from “offline” to “in-line” using cloud compute for AI and deep learning techniques, without sacrificing performance. The new AIOps uses machine learning to predict up to 51% of disruptions to next-generation firewalls before they affect the firewalls, according to the company. The AIOps feature also uses telemetry from more than 6,000 deployments to recommend best practices for improving overall security posture.

On the IoT security front, Nebula provides complete information technology and IoT asset visibility in one platform with extended detection and response integration. For DNS security, the new release extends protection for the latest DNS-layer attack techniques, including strategically aged domains.

And for URL filtering, Nebula adds prevention of new, highly evasive phishing attacks, ransomware and other web-based attacks through deep learning-powered analysis of web traffic, including web payload content, in real time and inline, the company said.

In conjunction with the release of Nebula, Palo Alto Networks has also introduced a new PA-3400 & PA-5400 Series ML-Powered Next-Generation Firewalls.

“Security approaches are too often reliant on an initial victim being exploited, yet with attackers as agile and efficient as they are today, organizations require real-time prevention to protect their environments,” John Grady, senior analyst at the Enterprise Strategy Group, said in a statement. “Palo Alto Networks recognizes these issues and is expanding its machine learning capabilities by placing deep learning detection inline to prevent attacks before they ever impact victim one.”

Image: Palo Alto Networks