Threat Prevention Services

Threat Prevention Services leverage the visibility of our next-generation firewall to inspect and prevent known threats.

Palo Alto Networks Threat Prevention Services leverage the visibility of our next-generation firewall to inspect all traffic, automatically preventing known threats, regardless of port, protocol or SSL encryption, confronting threats at each phase of the attack. This page provides resources about threat prevention security services to help keep your network secure. Ask your questions or provide insightful answers in the discussion forum specific to Threat Prevention.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
K.Nand 06-04-2025	Threat ID 31671 - SCADA ICCP Unauthorized COTP Connection Established I think the description of "Threat ID: 31671 - SCADA ICCP Unauthorized COTP Connection Established" is incorrect. Below is the description of the Thre... — Read more posted in Threat & Vulnerability Discussions	307	0
RAJASHEKAR123 06-01-2025	I'm not able get community Edition Dear Team, Please, can anyone help to get the community version of the XSOAR OVA file? Already I have registered but not received any mail posted in Threat & Vulnerability Discussions	883	2
momenzadeh 05-20-2025	High alert with signature Hello, I'm sending out a message in a bottle — I'm noticing a very high number of false positives on signatures with a high severity level, whether ... — Read more 4 posted in Threat & Vulnerability Discussions	750	0
User_707 05-15-2025	Packet Buffer Protection (PBP) We are receiving multiple alerts for Packet Buffer Protection (PBP) being triggered on internal-to-internal and internal-to-external traffic. My under... — Read more posted in Threat & Vulnerability Discussions	1257	1
ronald.levine 05-08-2025	Raspberry PI Custom Alert How do I setup a Custom Alert is IoT Security to detect a Raspberry pi device. I have the following vendor codes, and I want to setup a custom alert ... — Read more posted in Threat & Vulnerability Discussions	781	0

Blogs

Palo Alto Networks Leads in C2 Threat Prevention

05-13-2025 — At its core, Command-and-Control (C2) refers to the covert communication link established between a compromised system and the attacker’s remote infrastructure. — Read more

Labels: Cloud-Delivered Security Services Threat Prevention
704 1 by snair in Community Blogs

Announcing the Fuel Workshop Series and YouTube Playlist

09-03-2024 — Fuel User Group has a new Workshop series and YouTube playlist to familiarize customers with Palo Alto Networks ecosystem. Fuel User Group has a new Workshop series and YouTube playlist to familiarize customers with Palo Alto Networks ecosystem. — Read more

Labels: Best Practices Fuel Fuel User Group Fuel Workshop network security ngfw Threat Prevention
2925 2 by jforsythe in Community Blogs

Always Innovating in NetSec Series: User Experience, Threat Coverage and Management

01-09-2024 — In this edition, we have exciting announcements around innovations in AI Operations (AIOps) & Management, Advanced WildFire (Malware Analysis and Prevention) and Software Firewalls. This wide range of innovations cover areas of improving user expe... — Read more

Labels: Advanced WildFire AIOPS Always Innovating Next-Generation Firewalls ngfw Panorama Threat Prevention WildFire
3109 1 by GBalamitran in Community Blogs

Cobalt Strike Attack Detection & Defense Technology Overview

03-09-2023 — Learn about a range of detection techniques for stopping Cobalt Strike attacks, including signature-based, machine learning, and dynamic heuristics detection engines. Cobalt Strike Attack Detection & Defense Technology Overview — Read more

Labels: Cobalt Strike Next-Generation Firewalls ngfw Threat Threat Prevention Unit 42
29978 5 by emgarcia in Community Blogs

Using Cortex XSOAR to Deal With MSHTML Zero-Day Vulnerability (CVE-2021-40444)

09-14-2021 — Using Cortex XSOAR to Deal With MSHTML Zero-Day Vulnerability (CVE-2021-40444) Use this Cortex XSOAR playbook to protect against Microsoft's MSHTML Zero-Day Vulnerability (CVE-2021-40444). — Read more

Labels: Cortex XSOAR Threat Prevention
6057 by jforsythe in Community Blogs

Articles

Palo Alto Networks 7-byte Custom Signature Minimum Removed in Newer Versions and Why it Matters!

05-30-2025 — Using the capability of the Palo Alto NGFW and Prisma Access to write custom application and Vulnerability signatures helps Security engineers to implement many custom protections, specific to their network environment. — Read more

Labels: Firewall PAN-OS Threat Vulnerability
360 3 2 by nikoolayy1 in General Articles

How to Write Palo Alto Networks Custom Vulnerability and Application Signatures with Examples

05-30-2025 — Palo Alto Networks NGFW and Prima Access have many predefined IPS vulnerability signatures but sometimes extra custom signatures are needed that are specific to the application being protected as this need internal domain knowledge. Provided are s... — Read more

Labels: Custom Signatures Next-Generation Firewall. NGFW PAN-OS Prisma Access Vulnerability
430 3 4 by nikoolayy1 in General Articles

How to Deploy Prisma Cloud App-Embedded Defender in Azure ACI

03-03-2025 — ACI is an IaaS fully managed by Azure/Microsoft. It’s a service that enables users to deploy containers on the Microsoft Azure public cloud without having to provision or manage any underlying infrastructure. Up until recently, apps running in ACI... — Read more

Labels: ACI App Embeded Azure Container Instances Containers Defender GitHub Prisma Cloud Security Vulnerability
947 by RPrasadi in Prisma Cloud Articles

Threat Vector | Rethinking Cloud Security Strategies

02-06-2025 — Cloud security is more complex than ever. Organizations move fast, but security teams often struggle to keep up. In this episode of Threat Vector, host David Moulton speaks with Amol Mathur, SVP of Products for Prisma Cloud at Palo Alto Networks, ... — Read more

Labels: AI Automation Cloud Security cloud threats cloud-native data integration dynamic workloads incident response machine learning platformization proactive security Security Operations security silos security workflows shift-left security SOC Threat Prevention Threat Vector unified platform
662 by dmoulton in Threat Vector

Image Analysis Sandbox

10-30-2024 — The Prisma Cloud image analysis sandbox lets you dynamically analyze the runtime behavior of images before running them in your development and production environments. This article will walk you through the installation, execution, and analysis o... — Read more

Labels: Container Image Prisma Cloud Vulnerability Protection
2381 1 by RPrasadi in Prisma Cloud Articles

Resources

Videos

Digital Learning Courses

Access Palo Alto Networks learning platform to gain free technical insights and educational materials across our full suite of products.

Please note: SSO login is necessary to access the content.

Advanced Threat Preventon Features

Unlock your full community experience!