Palo Alto Networks (NASDAQ: PANW), a global cybersecurity leader, today announced a new milestone in its innovation in securing the cloud with a Security Operations Center (SOC). As part of CortexXSIAM ®for Cloud, the new technology enhances the CortexXSIAM platform of PTEC Networks, enabling it to provide native cloud detection and response capabilities in a unified solution, making CortexXSIAM the industry’s first cloud-optimized SOC platform.
PXIE-8842 Today, many enterprises run most of their operations in the cloud, but traditional SOC security tools are not designed for the cloud. Ptec Networks’ latest Cortex XSIAM for Cloud innovation provides cloud security operations with a single platform for faster, more robust security. It combines the unique architecture of cloud applications, understands the salient characteristics of cloud-related threats, and provides SOC analysts with the necessary real-time monitoring and response capabilities.
Gonen Fink, senior vice president of Cortex and Prisma Cloud products at Patol Networks, said: “This innovation in our Cortex XSIAM platform with integrated cloud detection and response underscores why we created Cortex XSIAM – to provide an integrated security operations platform powered by artificial intelligence (AI) and automation. This approach solves data silos, increases efficiency, and provides a better experience for security operations teams. Cortex XSIAM for Cloud delivers on PTEC Networks’ commitment to delivering a unified security solution from a single platform that improves speed and security.”
As part of the new cloud detection and response capabilities, Cortex XSIAM can provide customers with:
Comprehensive user interface (UI) and workflow: SOC analysts can leverage the new cloud command center to achieve complete visibility into cloud assets within Cortex XSIAM’s unified enterprise security platform. With this visibility, security teams are able to quickly identify and respond to cloud threats.
Extended Security Agent: The extended version of Cortex XDR®Agent enhances Cortex’s best-in-class runtime security and threat protection capabilities and the powerful vulnerability and security compliance management capabilities of Prisma®Cloud to provide a complete cloud detection and response solution. These new features not only eliminate the need to use two agents, but also greatly PXIE-8842 improve visibility while simplifying the deployment and implementation of the overall security plan.
Native integration with Prisma Cloud: The new Prisma Cloud integration further enriches the capabilities offered through cloud SOCs, bringing broader cloud asset context and security posture information for detailed incident grouping and more direct navigation.
Dave Gruber, principal cybersecurity analyst at Enterprise Strategy Group (ESG), said: “Our research shows that 89% of SOC teams have a significant role or full responsibility in cloud security operations. But current SOC tools often fail to provide the level of visibility and context needed to support cloud surveys. The new cloud-native security operations capabilities in Cortex XSIAM go some way to filling this gap, enabling cloud and security teams to collaborate more closely to better view, understand, and mitigate attacks involving cloud resources.”