LiveNetwork securityPulse
Touchpoint Pulse + Palo Alto Networks Firewall
Pulse ingests alerts from Palo Alto Networks Firewall so our analysts can triage, investigate and, within actions you pre-approve, contain threats 24/7, using the tool you already own.
What we collect
- Panorama and the firewall API threat and security events
- Source, destination and policy context
- Severity, where provided
What we detect
- Command-and-control traffic
- Exploit attempts against internet-facing services
- Suspicious VPN and remote access activity
What we can do
- 24/7 triage and investigation of every alert
- Blocking through Panorama and the firewall API, within your pre-approved authority, where supported
How it works
- 01ConnectOur team sets up the connection with you during onboarding.
- 02Agree authorityYou choose which response actions we can take without calling first.
- 03TuneWe tune detections to your environment to cut noise.
- 04MonitorAnalysts watch 24/7 and act within your agreed authority.
Every response action is optional and agreed in writing before go-live. Anything outside your pre-approved list, we call you first.
Other Network security integrations
Palo Alto Networks Firewall is a trademark of Palo Alto Networks. Touchpoint Security is not affiliated with or endorsed by Palo Alto Networks. Available data and actions depend on your licence and configuration.
Already run Palo Alto Networks Firewall?
We’ll show you what Pulse would see in your environment.