Stay one step ahead of Zero-day threats: Palo Alto Networks announces PAN-OS 11.0 Nova

Zero-day threats are demonstrably becoming more extensive and complex – and criminal actors continue to develop new methods to evade detection. Palo Alto Networks now offers PAN-OS 11.0 Nova, the latest version of its industry-leading PAN-OS software, which includes more than 50 product updates and innovations.

PAN-OS 11.0 Nova – an overview of the enhancements:

• Advanced WildFire: The new Advanced WildFire service builds on its specially “hardened” hypervisor and introduces completely new features, such as intelligent memory analysis combined with stealthy observation and automated unpacking to stay hidden from malware and thwart advanced evasion techniques.

• Advanced Threat Prevention (ATP): The advanced ATP service reimagines the Intrusion Prevention System (IPS) with industry-first inline capabilities to stop zero-day injection attacks. To protect against injection attacks, ATP deep-learning models have been developed based on data from over tens of thousands of exploited vulnerabilities over the past decade.

• Web Proxy Support: For customers whose network architecture or compliance requirements require them to run explicit proxies on their network, Nova natively introduces integrated proxy capabilities. Customers thus have consistent network security for campus locations, branch offices and mobile users.

• Palo Alto Networks Next-Generation Cloud Access Security Broker (CASB): natively integrated with Nova and Prisma SASE, CASB now includes all-new SaaS Security Posture Management to help find and eliminate dangerous misconfigurations in more than 60 enterprise SaaS applications.

• AIOps: Palo Alto Networks AIOps helps reduce misconfigurations that can lead to security breaches. AIOps protects against best practices violations and enables remediation of security policy inefficiencies.

Anand Oswal, Senior Vice President, Network Security, Palo Alto Networks:

“PAN-OS 11.0 Nova is a tremendous advancement for maximum network security. PAN-OS 11.0 Nova stops 26% more zero-day malware than traditional sandboxes, detects 60% more injection attacks, simplifies security architecture and helps organizations adopt cybersecurity best practices. The bottom line is that Nova helps every organization stay one step ahead of attackers.”

PAN-OS 11.0 Nova with fourth-generation NGFWs.

In addition to the PAN-OS software updates, a new set of ML-driven NGFWs enables the new features with up to five times the performance of the previous generation.

• PA-445 and PA-415: Flexibility of fiber and PoE ports for distributed enterprises and small and medium-sized businesses.
• PA-1400 Series: The ideal solution for protecting large branch offices and small enterprise sites.
• PA-5440: The solution for large campus sites and data centers. This platform offers twice the performance of the previous generation PA-5260.

New Core Security Bundle

The new Core Security Bundle combines five cloud delivered subscription services (Advanced Threat Prevention, Advanced Wildfire, DNS Security, Advanced URL, SD-WAN). The previous Professional and Enterprise bundles are scheduled for end-of-sales as of August 2023.

We think: PAN-OS 11.0 Nova addresses all the challenges that are currently being faced. Most importantly, zero-day threats are stopped in real time and the overall cyber hygiene can be significantly improved. If you have any further questions, please do not hesitate to contact us. Additional information can be found here.