Professional Documents
Culture Documents
AMAZON WEB
SERVICES
Amazon Web Services (AWS) is fueling an evolution
within todays data centers, enabling you to rapidly develop, deploy and manage new applications on a g
lobal
scale. The VM-Series for AWS enables you to protect
your applications and data in AWS with next-generation
firewall and threat prevention features.
VM-Series for AWS Use Cases Hybrid Cloud
Hybrid Cloud
Securely enable a hybrid cloud using our complete
next-generation firewall and advanced threat
prevention features
Move applications and data to and from AWS via
a standards-based, site-to-site IPsec VPN tunnel
Segmentation Gateway
Control application communication across different
subnets within a VPC and between VPCs while
blocking lateral threat movement
Internet Gateway
GP
VM-SERIES
1b
AZ
C4
policies to control traffic between VPCs. With application-level policies, you have greater control over application
traffic moving laterally, and you can apply threat prevention
policies to block their movement as well. If traffic is flowing
between VPCs in different regions across the Internet,
encryption can be enabled for added protection
Internet Gateway: Secure the Network, the Cloud, and
the Device
As your AWS deployment expands, you can build upon your
hybrid deployment by using the VM-Series as an Internet
gateway, further strengthening your security posture. With
the VM-Series you can control AWS access with application
whitelisting policies that are based on user identity and
business need. Application-specific threat prevention
policies to block exploits, malware, and previously unknown
threats (APTs) from gaining access to your AWS deployment
can also be applied, giving you added control and protection.
GlobalProtect will enable you to extend your security
policies to your remote users and mobile devices, regardless of their location. GlobalProtect establishes a secure
connection to protect the user from Internet threats and
enforces application-based access control policies. Whether
the need is for access to the Internet, data center or SaaS
applications, the user will enjoy the full protection provided
by the platform.
V
SeM
ries
C4
Segment applications
and data for security
and compliance
purposes
V
SeM
ries
C4
PA
N
O
R
A
M
A
GP
VM-SERIES
Application whitelisting
and threat prevention
policies protect your
AWS perimeter
C4
2016 Palo Alto Networks, Inc. Palo Alto Networks is a registered trademark
of Palo Alto Networks. A list of our trademarks can be found at http://www.
paloaltonetworks.com/company/trademarks.html. All other marks mentioned
herein may be trademarks of their respective companies. pan-vm-series-foraws-ds-032216