Jon's Network

In November 2007 I predicted that Fortinet would add SSL inspection to their Fortigate appliances to catch up with Palo Alto Networks. I was wrong by 4 months. FortOS 4.0, with SSL inspection, was released today. It boasts: Application Control SSL Inspection Data Leakage Prevention (DLP) WAN Optimization The first three are to catch up [...]

[Read more →]

Fix-the-Firewall-PAN-ebook.pdf This ebook provides a brief introduction to the limitations of traditional port-blocking firewalls and explains how Palo Alto Networks resolves these problems. There is an in-depth product demo here. More discussion on the topic at What is a Firewall.

[Read more →]

Nir Zuk of Palo Alto Networks posted a video response to this online video argument about firewall innovation that I mentioned before. Via Nir Zuk responds | ThreatChaos

[Read more →]

Richard Stiennon hosted a round-table discussion about firewall innovation. Two main opinions were argued. Mike Murray argued that there hasn’t been any innovation for the past decade, that firewalls do stateful inspection to keep most of the garbage out and that is it. Adding functionality from other parts of the security market isn’t firewall innovation, [...]

[Read more →]

Organizations under pressure to keep students and employees from bypassing internet filters using client technologies, like UltraSurf are in a perpetual game of cat and mouse. A network admin I know used these steps to block it on his Sonicwall: Ultrasurf uses “140300000101″ for SSL ehlo messages. If you can block this signature with the [...]

[Read more →]

Ya, there are other IT vendors on YouTube (StillSecure, Lumension, Sophos), but so far only Palo Alto has tried to be funny. Here’s to going viral:

[Read more →]