NEWS

Palo Alto Networks announces expansion of its CASB

By VARINDIA - 2017-10-04

Palo Alto Networks has announced that its Cloud Access Security Broker (CASB) offering, Aperture SaaS security service, now provides application protections for several Amazon Web Services solutions, including Amazon Elastic Compute Cloud, AWS Identity and Access Management and Amazon Simple Storage Service.

The new protections address sensitive data loss, enable monitoring for risky or suspicious administrator behaviour, and provide additional protection against security mis-configurations and malware propagation. When combined with the preventive capabilities of the Palo Alto Networks Next-Generation Security Platform, these advancements will enable organizations to achieve even more protection for AWS, as well as address critical cloud security needs to deliver the most complete application and data security for cloud environments. Additionally, Aperture support for Office 365 and Google applications has been enhanced to include cloud-based email services and G Suite Marketplace applications.

Palo Alto Networks Aperture controls enterprise SaaS applications and associated data by examining and controlling how data is shared, all without impact to user experience or changes to network infrastructure. If a policy violation occurs, Aperture enables quick enforcement of security policies to quarantine folders and data while immediately alerting security teams of suspicious behaviour.

Commenting on the same, Lee Klarich, Executive Vice-President, Product Management, Palo Alto Networks, said, “Our Aperture service secures business-critical data residing within today’s most important cloud-based enterprise SaaS applications. With extensive capabilities across our security platform and our latest application protections for Amazon Web Services, our customers benefit from complete visibility and granular control, instant classification, and enforcement across users, folders, and file activities, enabling them to prevent cyber breaches and protect their data no matter where it resides.”

Key new Aperture advancements include:

• Support for AWS: Aperture now provides additional in-cloud security controls to prevent improper use while enabling malware protection and data governance policies via integration with Amazon EC2, IAM and Amazon S3.

• Support extended to Office 365 Exchange: Aperture now adds the ability to scan email content and attachments for compliance violations, malware, user impersonation and data exposure within Office 365; this capability also complements the company’s existing integration with Proof point, offering customers increased visibility and comprehensive protection against advanced cyber threats via email.

• Controls for new productivity and file-sharing apps: Aperture already offers protection for a number of business-critical SaaS applications, such as Box, salesforce.com, Office 365 and many others; in addition to Amazon EC2, IAM and Amazon S3, Aperture now supports several other applications, including Citrix Share File, Atlassian Confluence, G Suite Marketplace applications, Jive, and Microsoft Office 365 Exchange Server.

• Policy control for G Suite Marketplace applications: Aperture can now apply policy control across Marketplace applications, protecting organizations from targeted phishing and malware attacks, or unwanted data sharing, through the Google G Suite Marketplace.

• SIEM integrations with new API and log forwarding capability: Customers can now configure Aperture to interface with syslog servers and API clients, allowing them to push event information to external syslog servers or access event information from the Aperture service via a REST API.

• Monitoring for suspicious user behaviour: Aperture now supports the ability to alert administrators if suspicious activity is detected within SaaS applications.