VMware VCENTER APPLICATION DISCOVERY MANAGER 6.0 Manual do Utilizador descarregar pdf (Página 6)

What’s New in PAN-OS 6.0

Management Features

 Commit Improvement—The commit operation in PAN-OS and Panorama has been enhanced to allow configuration

edits during a commit. For example, if two administrators are logged in to the same firewall and the first administrator

performs a commit, the second administrator can make updates to the configuration during the commit. This

enhancement does not, however, allow multiple administrators to commit simultaneously.

 Content Delivery Network (CDN)/Update Server Verification—Palo Alto Networks will begin transitioning to the use

of a CDN for delivery of software and content updates to devices running PAN-OS/Panorama 6.0 or later. This new

process will provide a secure and distributed infrastructure to improve the software update process and license

installation/verification for customers around the world.

In addition, a new option has been added to strengthen all secure communication between firewalls/Panorama and the

Palo Alto Networks update servers. When this feature is enabled, Panorama or PAN-OS will not perform a

software/content download unless the update server has an SSL certificate signed by a trusted authority. This will help

ensure that software updates and license verification will only be performed from Palo Alto Networks and will eliminate

the possibility of man-in-the-middle attacks.

 Rule Numbering—Each rule in the Policies tab is automatically numbered and the ordering adjusts as rules are moved

or reordered. When filtering rules to find rules that match the specified filter(s), each rule is listed with its number in the

context of the complete set of rules in the rulebase and its place in the evaluation order.

In Panorama, pre-rules and post-rules are independently numbered. When rules are pushed from Panorama to a

managed firewall, the rule numbering incorporates hierarchy in pre-rules, device rules, and post-rules within a rulebase

and reflects the rule sequence and its evaluation order.

 Reporting Enhancements—Reporting enhancements in this release include support for creating group activity reports,

complementing user activity reports and the ability to disable predefined reports. Because Panorama does not have the

user to group mapping information, you cannot generate group activity reports on Panorama.

 CLI Find Command—The new CLI find command helps you find a command when you don’t know where to start

looking in the hierarchy. The command—which is available in all CLI modes—has two forms. You can either use find

command alone to display the entire command hierarchy in the current command mode. Or, you can use find command

with the keyword argument to locate all commands that have the specified keyword.

 Support for Syslog over TCP and SSL—PAN-OS and Panorama now support using TCP or SSL (default is UDP) for

reliable and secure transport of logs to an external syslog server. SSLv3 and TLSv1 are supported and the default SSL

port is 6514. To separate individual syslog messages in a TCP stream, the delimiter formats available are LF- Line Feed

(BSD Format, the default), and Message Length (IETF Format).

 SNMP Resource Monitoring Extensions— All Palo Alto Networks firewalls support SNMP objects that provide

resource utilization and failure reporting, including alerts for hardware failure, the insertion and removal of the power

supply, disks, or system fans, and monitoring of resource utilization for high session use or load on the gateway.

The HOST-RESOURCES-MIB includes objects for monitoring the following:

o Memory and disk usage on the management plane. Swap utilization tracks how the swap space is

used to store all the running programs that aren't being actively used to free up memory.

o Packet buffers on the data plane.

The Enterprise MIBs include objects for monitoring the following:

o GlobalProtect gateway utilization in the PAN- Common MIB- to monitor the total number of current

active tunnels on the firewall device and the percentage on current tunnel utilization that is based on

the number of active tunnels and the maximum number of tunnels allowed.

o Session utilization in the PAN-Common MIB for each virtual system to track the active sessions, and the

percentage of current session utilization based on session limit configured for the virtual system.

 Support for Color-Coded Tags—Tags allow you to group objects using keywords/phrases and color (optional) to

visually distinguish objects. You can apply tags to address objects, address groups (static and dynamic), zones,

services, service groups, and policy rules.

1 2 3 4 5 6 7

What’s New in PAN-OS 6.0 1

Comentários a estes Manuais

Sem comentários

VMware VCENTER APPLICATION DISCOVERY MANAGER 6.0 Manual do Utilizador Página 6

Comentários a estes Manuais

Manuais e produtos relacionados com Gateways/controladores VMware VCENTER APPLICATION DISCOVERY MANAGER 6.0