3马振国-Palo Alto Networks-未来安全在云端（10页）.pdf

1、马振国/Field CTO/Palo Alto Networks马振国（Daniel）从事IT行业20余年，专注于基础架构及安全领域的研究与实践。目前就职于Palo Alto Networks，关注于SASE，SDWAN，云安全等领域及与阿里云，谷歌云，亚马逊云科技以及Azure的联合安全解决方案。演讲主题：Palo Alto Networks-未来安全在云端未来安全在云端马振国（Daniel）Field CTO,Public Cloud10 个月见证了相当于 10 年的变化工作工作 购物购物学习学习健康健康Heavy BranchThin BranchHeavy CloudSource:Ga

2、rtnerID:441737从传统的从传统的 Heavy Branch 转型为基于云的 Thin Branch/SASE 模式RouterVPNFWWOCSWGDLPSD-WAN/FWWOCCASBFWaaSZTNA/SDPThreatSWGDLPVPNWAAPaaSSandboxRBISource:IDC,2020安全服务增速加快 2024 200亿Network as a Service LayerNetwork as a Service LayerMobileMobileHomeHomeBranch/RetailBranch/RetailAutonomous Digital Experi

3、ence ManagementAutonomous Digital Experience ManagementSecurity as a Service LayerSecurity as a Service LayerFWaaSCASBZTNACloud SWG SD-WANSegment-wise insightsAuto-remediationSaaSSaaSPublic CloudPublic CloudInternetInternetHQ/Data CenterHQ/Data CenterPrisma AccessPrisma AccessPrisma SD-WAN Prisma SD

4、-WAN 全流量安全防护全流量安全防护完整的安全平台完整的安全平台优质的用户体验优质的用户体验DLPSandboxPalo Alto Networks 覆盖全球的云安全平台未知样本未知样本始终如一的防护始终如一的防护全覆盖的安全平台 安全数据的统一分析TP TPWFWFDLPDLPURLURLDNSDNSSaaSSaaSIoTIoT第三方数据云PrismaPrismaCloudCloud网络PA-PA-系列系列VM-VM-系列系列PrismaPrismaAccessAccess端点CortexCortexXDRXDRCortexCortexXSOARXSOARCN-CN-系列系列UNIT 42

5、 威胁情报云端交付服务云端交付服务Internal web apps hosted on CloudEmployeesContractorsPartnersInternal web apps hosted on-premInternal web apps hosted on other cloudsProxies&protects traffic from the internetEnforces access policies based on identity&contextCloudThreat and data protection built-in to the Chrome browserSaaS ApplicationsEndpointEndpointCloudCloudNetworkNetworkGoogle WorkspaceSaaS Security APISanctioned Visibility and ControlAdvanced protection across multiple/access endpoint typesPrisma Access与公有云平台的零信任集成与接入普华永道的托管安全服务（MSS）与派拓网络的Cortex XDR,Cortex XSOAR安全平台相结合，助力中国企业化被动