Palo Alto Networks - Implementing DoD Directive

Palo Alto Networks (PAN) can be used to effectively implement controls for authorized users of the NIPRNET pertaining to social networking, chat instant messaging, e-mail and discussion forums. This can be used to address Directive-Type Memorandum (DTM) 09-026. This includes applications such as YouTube, FaceBook, MySpace, Twitter, Google Apps and P2P. Over 1,000 applications can be individually controlled and monitored or treated as groups along with automatic updates.

PAN can be used to identify users and restrict certain higher risk functions of social engineering sites while still allowing appropriate and approved base activity on social sites such as FaceBook.

This can be done while augmenting existing controls. Optionally, it can subsequently replace and offer centralized control and cost savings for:

IPS (Intrusion Prevention System)
Malware, viruses, remote control and other network based threats
Bandwidth limiting via QoS (Quality of Service)
URL filtering
Content control to protect SSN, Credit Card numbers and custom filters
DDoS (Distributed Denial of Service) protection
VPN site to site terminations including 3DES and AES
SSL VPN remote user access
User based activity reports
Multiple ports to concurrently allow sniff/tap, inline and routed interfaces at high rates of speed using a single pass architecture

Learn more about the models and features.

Additional documentation and information

For more information, please contact us.