Palo Alto Networks
Synchron uses Palo Alto Networks next-generation firewalls in its firewall management service.
Palo Alto Networks, our solution partner
Palo Alto Networks makes next-generation firewalls (NGFW) and network security products. Palo Alto Networks is a solution partner of Synchron. We use Palo Alto Networks firewalls in our Firewall Management service. We install the devices, write the rule set and run their daily operation.
We use Palo Alto Networks firewalls in head office, branch and data center networks. We write the rule set at the application and user level.
Palo Alto Networks products we use
PA-Series
Hardware next-generation firewalls. Example models: the PA-400 Series, the PA-1400 Series and the PA-5450.
VM-Series
A virtual firewall for private cloud, public cloud and virtualized environments.
CN-Series
A container firewall that protects Kubernetes containers.
Cloud NGFW
A cloud firewall service for AWS that Palo Alto Networks manages.
PAN-OS, App-ID and User-ID
App-ID classifies traffic by application, whatever the port, protocol or encryption. User-ID connects the rules to users. SSL/TLS decryption inspects encrypted traffic for threats.
Cloud-delivered security subscriptions
Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire, Advanced DNS Security and GlobalProtect remote access.
Central management
Panorama and Strata Cloud Manager manage many firewalls from one point.
Palo Alto Networks with Synchron
We install and manage Palo Alto Networks firewalls end to end. Scope of the service:
Review of the current setup
Review of the current firewall rules and network structure
Model selection
Model selection by bandwidth, user count and security subscriptions
Installation and rule set
Installation, security zone design and a rule set based on App-ID and User-ID
GlobalProtect VPN
Remote access VPN with GlobalProtect
Central management with Panorama
Central management of many devices with Panorama
Updates and log analysis
PAN-OS updates, rule reviews and log analysis
SIEM integration
Sending firewall logs to the SIEM system
Yearly rule cleanup
Yearly rule cleanup and access review
Our services with Palo Alto Networks
Palo Alto Networks is one of the solution partners we work with in the following services:
Firewall Management
We install your firewall, write its rule set and run it day to day. We work with FortiGate, Palo Alto Networks and MikroTik devices.
Software Licensing
Synchron provides licenses and subscriptions for Microsoft (CSP and SPLA), Proxmox, Veeam, Acronis, MailStore, ESET, Bitdefender, Fortinet, Palo Alto Networks, Netwrix, Adobe, Alcatel-Lucent Enterprise, Cisco, Aruba, MikroTik and Neat products. The team that sells the license also handles installation, renewal tracking and support.
To learn more about network security projects with Palo Alto Networks, contact us.
Frequently asked questions
What do Palo Alto Networks App-ID and User-ID do?
App-ID identifies traffic by application instead of port and protocol. User-ID connects traffic to users and user groups. With these two functions, we write rules at the level of "which user uses which application".
Does a Palo Alto Networks firewall inspect encrypted traffic?
Yes. The firewall decrypts SSL/TLS traffic and inspects it for threats. Together with the company, we decide which traffic categories stay out of decryption, by its privacy policy.
How are many Palo Alto Networks devices managed?
Panorama and Strata Cloud Manager manage many firewalls from one point. In companies with branches, we distribute common rules with central templates.
Does a Palo Alto Networks firewall run in a virtual environment?
Yes. The VM-Series runs in private and public clouds and in virtualized environments. The CN-Series protects Kubernetes containers.
Which Palo Alto Networks security subscriptions are necessary?
The choice depends on the need. Advanced Threat Prevention is for intrusion prevention, Advanced URL Filtering for web filtering, Advanced WildFire for the analysis of unknown malware and GlobalProtect for remote access. We recommend subscriptions after a risk assessment.
How is a migration to a Palo Alto Networks firewall done?
First, we examine the rules, NAT definitions and VPN connections of the current firewall. We remove unused rules and prepare the new rule set. We do the migration in a maintenance window and monitor the traffic after it.
How are Palo Alto Networks logs analyzed?
The firewall records traffic and threat logs. We analyze the logs in Panorama or Strata Cloud Manager. We also send the logs to the SIEM system of our SIEM – SOC Management service.
Let's discuss your project
Tell us what you need and we will match you with the right team. For urgent issues, call our support line.