CLOUD SECURITY

Palo Alto Networks Bolsters Its Cloud Native Security Offerings With Out-of-Band WAAS

Palo Alto Networks | June 24, 2022

Palo Alto Networks
Over the last two years, organizations have expanded their use of cloud environments by more than 25%. Many are now struggling to manage the technical complexity of cloud migration, including the ability to secure their applications across the entire application development lifecycle. Palo Alto Networks (NASDAQ: PANW), a leader in The Forrester Wave™: Cloud Workload Security, Q1 2022, today announced the addition of Out-of-Band Web Application and API Security (Out-of-Band WAAS) to Prisma Cloud to help organizations secure web applications with maximum flexibility.

Until now, a primary industry approach to securing web applications has been to deploy inline web application firewalls (WAFs). Some organizations are reluctant to introduce WAFs or API security solutions inline, however, due to performance and scalability concerns. With today's announcement, Prisma Cloud can provide organizations with deep web and API security both inline and out of band, allowing them to choose how to protect their applications in the cloud.

"Companies no longer have to decide between application security and performance. By adding Out-of-Band WAAS to Prisma Cloud, we are empowering customers with flexible security options that fit their evolving application needs, As more organizations move workloads to the cloud, the capabilities that make up Prisma Cloud help provide the most complete protection, reducing complexity and increasing visibility across infrastructure, workloads, identities and applications."

Ankur Shah, senior vice president, Prisma Cloud, Palo Alto Networks

"As organizations increasingly build and deploy their applications in the cloud, protecting their business-critical applications without impacting performance has been a challenge," said Melinda Marks, senior analyst, ESG. "Adding the option of Out-of-Band WAAS helps both developer and security teams secure their applications with the same level of security as traditional in-line WAFs and API security without impacting performance."

In addition to Out-of-Band WAAS, Prisma Cloud is getting new threat detection, alert prioritization and permissions management capabilities to help provide organizations with deeper, unified visibility across their entire cloud application portfolio:
  • Multicloud Graph View for Cloud Infrastructure Entitlement Management (CIEM): Discover over-privileged accounts and understand access risk across multicloud environments. Prisma Cloud now provides a graph view of the net effective permissions across AWS, Microsoft Azure and Google Cloud.
  • Multicloud Agentless Cloud Workload Protection: Extend visibility into cloud workloads and application risks across Azure and Google Cloud, in addition to AWS, to complement existing agent-based protection.
  • DNS-Based Threat Detection: Surface malicious activity and anomalous behavior in cloud environments. Prisma Cloud Threat Detection now leverages machine learning (ML) and advanced threat intelligence to identify bad actors hiding in DNS traffic.
  • MITRE ATT&CK® Alert Prioritization: Enable security teams to prioritize risks and incidents based on the industry's most widely adopted framework.

Availability
Out-of-band WAAS is available today for Prisma Cloud Compute Edition and will be available in the Enterprise Edition over the next month. The additional features will also roll out for Prisma Cloud Enterprise Edition over the next month.

About Palo Alto Networks
Palo Alto Networks is the world's cybersecurity leader. We innovate to outpace cyberthreats, so organizations can embrace technology with confidence. We provide next-gen cybersecurity to thousands of customers globally, across all sectors. Our best-in-class cybersecurity platforms and services are backed by industry-leading threat intelligence and strengthened by state-of-the-art automation. Whether deploying our products to enable the Zero Trust Enterprise, responding to a security incident, or partnering to deliver better security outcomes through a world-class partner ecosystem, we're committed to helping ensure each day is safer than the one before. It's what makes us the cybersecurity partner of choice.

Spotlight

With close to 20 years of experience in web development, Pivotal enables enterprises to provide modern software-driven experiences to their customers and workforces. Their Cloud Native Platform, known as Pivotal Cloud Foundry, enables you to transition to cloud native enterprise with a complete platform for delivering software rapidly, consistently and reliably at scale.


Other News
CLOUD STORAGE

ManageEngine Releases SaaS Version of Analytics Plus to Complete its Deploy-Analytics-Anywhere Model

ManageEngine | August 09, 2022

ManageEngine, the enterprise IT management division of Zoho Corporation, today announced that its IT analytics product, Analytics Plus, is now available as a SaaS offering, enabling users to set up a fully functional, integrated analytics platform in under 60 seconds. This launch completes the company's vision to deploy analytics anywhere, that is, to make it easy for an organization to deploy analytics on private or public clouds such as AWS and Azure. ManageEngine will showcase the new offering at its user conference to be held on August 4-5, 2022, at the InterContinental Melbourne in Australia. IT operations nowadays are structured in a way that warrants the use of several monitoring tools and technologies to ensure the business remains operational and accessible to its customers around the clock. While these disjointed IT tools provide visibility into their area of operations, they fall short in providing complete visibility into IT as a whole, costing IT leaders time and effort in gathering insights. Analytics Plus' new cloud offering completes the IT application stack by creating a foundation for integrations, allowing organizations to connect to a multitude of data sources and attain faster time to market, increase productivity, curb expenditure and garner more revenue. "At ManageEngine, we've witnessed several digital transformation trends over the last two decades across all industry verticals: rapid cloud adoption, a need for setting up a data-centric culture, and the need for advanced AI to sift through data lakes and establish correlations, triage events, and eliminate the need for human intervention in data analysis, That's why we've launched the cloud version of Analytics Plus—a marriage of our 20+ years of domain expertise with cloud benefits like flexibility, agility and scalability to help augment strategic decision-making with insights that are fast, reliable and contextual." Rakesh Jayaprakash, product manager at ManageEngine Analytics Plus can be deployed in on-premises servers (Windows or Linux-based), Docker or on cloud platforms such as AWS, Azure and Google Cloud. IT and Business App Connectivity to Track IT Performance Holistically Analytics Plus now connects with more than 40 business applications such as Microsoft Dynamics CRM, Stripe, SurveyMonkey, Google Analytics, Xero, QuickBooks, Salesforce CRM, and LinkedIn along with over 30 IT monitoring applications such as SolarWinds, Nagios, Splunk, DataDog, AppDynamics, and OpenNMS to help IT leaders get a holistic view of IT performance. Support for these new apps will enable IT leaders to measure the ROI of IT along with how IT has contributed to achieving business objectives. Context-Aware AI to Deliver Domain-Level Intelligence ManageEngine has also enhanced its built-in AI assistant with domain-level intelligence to bridge the gap between data and decision makers. "Contextual AI can deliver the most crucial insights at a large scale that will resonate with IT leaders. For example, context-aware AI can suggest how to deploy workloads in the most cost-effective and high-performing cloud locations, taking into account performance, cost structure and security requirements," said Jayaprakash. Analytics Plus' context-aware AI enables users to: Establish correlations between data from various applications and data sources. Quickly identify opportunities and threats. Gain granular insights into aspects of IT operations and business that might not be possible otherwise. Stan Veloutsos, IT service desk manager at Regis Aged Care in Australia, said, "Analytics Plus helped us improve processes by 30%. Using Analytics Plus, we were able to deep dive into IT data, identify problems and trends, align project releases and also increase agent performance. It also helped us share our findings with a larger audience for better reach. With Analytics Plus, we have also set up easy-to-read dashboards for our CXOs with custom metrics and widgets, so they can gain information and make decisions that can increase our revenue." Pricing and Availability The cloud version of Analytics Plus offers a Professional edition at $199/month for two users and three viewers. The Enterprise edition starts at $399/month for 10 users and 25 viewers. The Personal edition is available for free forever and supports one user. A free, fully-functional evaluation is also available. For more details on pricing, visit https://mnge.it/ySN About Analytics Plus Analytics Plus is an AI-enabled, IT analytics solution that connects with over 200 IT and business applications to enable CXOs to converge analytics on a single pane for faster decision-making. Zia, the built-in AI-assistant, comes loaded with IT domain intelligence that identifies correlations in data from multiple applications and data sources, and provides actionable insights to resolve problems and exploit opportunities. Analytics Plus supports cross-module analytical capabilities that helps leaders gain insight into how functional IT domains such as service management, operations management, IT financial management, and project management are all interrelated. About ManageEngine ManageEngine is the enterprise IT management division of Zoho Corporation. Established and emerging enterprises—including 9 of every 10 Fortune 100 organizations—rely on ManageEngine's real-time IT management tools to ensure optimal performance of their IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine has offices worldwide, including the United States, the United Arab Emirates, the Netherlands, India, Colombia, Mexico, Brazil, Colombia, Singapore, Japan, China and Australia, as well as 200+ global partners to help organizations tightly align their business and IT.

Read More

CLOUD SECURITY

Snow Software and Anodot Partner to Transform Cloud Cost Management

Snow Software | June 10, 2022

Snow Software, the global leader in technology intelligence, and Anodot, the business monitoring company, today announced a new strategic partnership to help organizations solve the urgent challenge of managing rapidly growing and increasingly complex cloud costs. Snow and Anodot will bridge the disciplines of IT asset management (ITAM) and finance operations (FinOps) together to address evolving issues associated with cloud cost management. As cloud usage rises rapidly across industries, companies are increasingly struggling to attain complete visibility into their spend across technologies and across multi-cloud environments, Kubernetes costs, cost variability and allocation, and bill complexity, resulting in missed opportunities to reduce cloud waste and overspending. The two companies are committing significant go-to-market and research & development investments, leveraging core technologies in their portfolios – Snow Atlas and Anodot Cost – to address this acute market challenge. According to IDC, cloud spending will exceed $1.3 trillion by 2025. This spending includes everything from cloud infrastructure and application services to servers and storage, to professional and managed services. Cloud spending continues to surge, but organizations struggle to gain a complete picture of their cloud investment. While ITAM provides a view into the software used and FinOps helps organizations navigate the bill from their cloud service provider, there isn’t one holistic view available to leaders. Snow and Anodot are dedicated to solving this issue by offering a complete picture of cloud investments to every stakeholder across an organization that requires visibility of those resources from IT to FinOps to Engineering. As a first step of the partnership, Snow is introducing a cloud cost management solution that enables granular cloud cost visibility and continuous cost monitoring for multi-cloud and Kubernetes environments—including Amazon Web Services, Microsoft Azure and Google Cloud Platform—and provides actionable savings recommendations. Snow Cloud Cost powered by Anodot offers an easy-to-use dashboard that enables attribution and tracking of costs across cloud providers, applications, services and lines of business in near real-time. The solution also provides accurate forecasting, anomaly detection and alerts, which eliminate cost spikes and foster a successful FinOps culture. “We believe the traditional approach to managing cloud costs is no longer sufficient, and it’s time to address the next evolution of cloud cost issues,” said Vishal Rao, President and CEO of Snow. “Organizations that struggle to manage their investments often end up paying for more than they need. With our combined expertise, Snow and Anodot are uniquely positioned to make an immediate and meaningful impact to an organization’s cloud investment because we are bringing together two key disciplines – ITAM and FinOps. Snow has a long history of providing organizations actionable insight into technology investments that goes beyond IT asset management, what we call technology intelligence. With this partnership, we are bringing technology intelligence to cloud cost management to give our customers more control, more visibility and more decision-making power over their cloud investments.” Snow’s vision for technology intelligence enables organizations to accelerate data-driven decision making by providing complete visibility into all technology within their organization, combined with built-in intelligence to optimize cost, usage and risk. To make this vision a reality, Snow is broadening its ecosystem of technology partners that will bring the highest quality data and insight from all technology domains into the Snow Atlas platform. Anodot is joining this expanding ecosystem, bringing their machine learning backed business monitoring expertise. “Businesses across the board understand the need to cut expenses in this delicate period, and cloud costs are a significant part of this, Yet as investment in cloud services swells, we are seeing a new era of complexities that requires a different approach. The need to address this evolving challenge has led to a sharp rise in demand for our cloud cost management tools, which Snow has recognized. The sum of our joint expertise is far greater than its parts, and we are excited about the ways this joint solution will help businesses across industries get a handle on their cloud management and costs.” David Drai, CEO and Co-founder of Anodot FinOps, an evolving cloud financial management discipline and cultural practice, is increasingly adopted by organizations around the world. With more than 1,500 company members and 5,300 individual members, the FinOps Foundation is dedicated to advancing people who practice the discipline of cloud financial management through best practices, education and standards. Snow has been an active member of the FinOps Foundation since July 2021 and currently has more than 35 FinOps certified team members across Sales, Product and Support. As cloud requirements continue to evolve, especially in FinOps, Snow is committed to contributing to FinOps Foundation working groups to collectively address cloud cost management issues with other industry leaders. For further details about the Snow-Anodot partnership and to preview what’s ahead in cloud cost management, find Snow at FinOps X, the FinOps Foundation event in Austin, Texas on June 20-21. About Snow Software Snow Software is changing the way organizations understand and manage their technology consumption. Our technology intelligence platform provides comprehensive visibility and contextual insight across software, SaaS, hardware and cloud. With Snow, IT leaders can effectively optimize resources, enhance performance and enable operational agility in a hybrid world. About Anodot Anodot is the business monitoring company that eliminates business blind spots by proactively monitoring business metrics, enabling companies to protect revenue, and manage cost. Leveraging AI and ML, Anodot’s augmented analytics proactively alert companies to revenue-critical business incidents and automates their remediation in real time. Anodot’s Cloud Cost Management solution helps FinOps teams reduce cloud waste and manage costs in multi-cloud and Kubernetes environments, providing actionable recommendations that can cut up to 40% on annual cloud spend. Anodot is trusted by numerous Fortune 500 companies to help slash time to detection and resolution for revenue-critical issues by as much as 80%.

Read More

CLOUD STORAGE

ICF Partners with Google Cloud

ICF | June 01, 2022

ICF (NASDAQ:ICFI), a global consulting and digital services provider, is partnering with Google Cloud to expand its cloud and analytics services to public sector clients. "As organizations across the public sector execute on their digital transformation strategies, there is an increased need for technology partners and solutions that seamlessly support these transformation goals," said Lesta Brady, director, federal sales, Google Cloud. "We're pleased to partner with ICF and continue helping customers across the public sector with the solutions and expertise they need to move into the next stage of their digital transformation journeys." ICF's partnership with Google Cloud illustrates ICF's success in accelerating digital transformation for federal agencies on Google Cloud's platform, which includes supporting federal health clients such as the National Cancer Institute and many others. The partnership further expands the company's digital and partnership ecosystem in support of its multi-cloud strategy. Combining ICF's deep domain and technology consulting expertise with new Google Cloud capabilities enhances ICF's capabilities to rapidly deploy digital solutions that advance our customers' missions and increase operational efficiency. "ICF's partnership with Google Cloud strengthens our ability to bring greater innovation to federal agencies so they can deliver better citizen services, faster, With Google Cloud as a partner, ICF can provide more clients with the interdisciplinary partners they need to accelerate their migrations to the cloud and increase their mission impact." Mark Lee, ICF executive vice president and public sector lead ICF combines public sector domain expertise with an ecosystem of platform partners and digital practices to deliver responsive, scalable solutions that achieve clients' mission outcomes and a step change in productivity. The company's digital solutions help mission leaders solve critical problems, modernize systems, harness the power of data and analytics and optimize the customer experience to drive positive change from within. Read more about ICF's digital transformation and federal health IT services and its technology partnerships. About ICF ICF is a global consulting services company with approximately 8,000 full- and part-time employees, but we are not your typical consultants. At ICF, business analysts and policy specialists work together with digital strategists, data scientists and creatives. We combine unmatched industry expertise with cutting-edge engagement capabilities to help organizations solve their most complex challenges. Since 1969, public and private sector clients have worked with ICF to navigate change and shape the future.

Read More

CLOUD SECURITY

Apiiro Launches Partner Program to Help Customers Fix Cloud-Native Application Risks Faster

Apiiro | June 09, 2022

Apiiro, the leader in Cloud-Native Application Security, today announced the Apiiro Partner Program, which provides comprehensive support for technology, consulting, and reseller partners across the Cloud-Native Application Protection Platform (CNAPP) ecosystem. In the era of cloud-native application development, the remediation lifecycle is getting longer and more complex because risks are distributed across the design, code, open source packages, infra-as-code, containers, Git and CI/CD servers, and cloud infrastructure. In addition, the shift in responsibilities and the use of a multitude of tools, each addressing only a small subset of cloud-native application risks has reduced the overall efficacy with noisy alerts and false-positives due to the lack of context. Context from cloud infrastructure to code and Software Bill Of Materials visibility (SBOM) are instrumental for the remediation process across the software supply chain. Partners like Alacrinet, Defy Security, Google Cloud, HashiCorp, NetSPI, NXGN, Parabellyx, and Trace3 from the cloud-native application security, DevOps, cloud infrastructure security, and other cybersecurity industries are joining the Apiiro Partner Program to work together to help customers remediate cloud-native application risks across the software supply chain. Partners will benefit from the Apiiro Risk Graph technology and enabling resources to speed customer adoption and success with a contextual shift left risk remediation technology. "Our customers aren't just modernizing their cloud-native application security - they're reinventing the way they develop, build, and deploy cloud-native applications across the software supply chain. By uniting in the Apiiro Partner Program, Apiiro and our partners can collectively ensure cloud-native applications are developed and delivered in a secure manner," John Leon, VP of Business Development at Apiiro Program benefits include training materials and sales resources, access to technical evaluation demos and documentation to enable go to market and joint promotion opportunities. By enrolling in the Apiiro Partner Program, partners can increase their value to customers by delivering contextual shift left risk remediation before releasing to the cloud. Apiiro has quickly gained momentum and recognition in the cloud-native application security market: The current winner of the prestigious RSA Sandbox Innovation Award Named a Gartner 2021 Cool Vendor in DevSecOps Detected Day 0 Supply Chain Security vulnerability found on Kuberenetes based Argo CD platform Contributor to the NIST 800-218 Secure SW Development Framework published February 2022 Apiiro is a new partner in the Google Cloud Marketplace. Google Cloud customers can purchase the Apiiro platform directly on Google Cloud Marketplace, enabling them to simplify cloud software procurement for their enterprise via online discovery, purchasing, and fulfillment. About Apiiro Apiiro helps security and development teams proactively fix risk across the software supply chain, before releasing to the cloud. Backed by Greylock and Kleiner Perkins.

Read More

Spotlight

With close to 20 years of experience in web development, Pivotal enables enterprises to provide modern software-driven experiences to their customers and workforces. Their Cloud Native Platform, known as Pivotal Cloud Foundry, enables you to transition to cloud native enterprise with a complete platform for delivering software rapidly, consistently and reliably at scale.

Resources