Palo Alto Networks Prisma Access PoC set up in ANZ region by Enablis

Enablis Pty Ltd is a leading Palo Alto Networks SASE Certified Partner that has successfully deployed Prisma Access services to multiple customers in the ANZ region. This private offer is targeting Organisations in the ANZ region with a minimum of 500+ users and includes professional services to deploy, test and verify Palo Alto Networks Prisma Access solution for up to 30 users over a 30-day period, with an option to convert the service to a production environment if the customer chooses to purchase the relevant licenses at the end of the trial. Enablis will work with the customer’s nominated point of contact to gather requirements and define success criteria based on a list of predetermined test cases, to then deploy the Prisma Access service across the nominated users allowing the customer to test the solution’s usability and performance. The POC private offer pricing includes licenses and professional services to implement the solution for up to 30 users. The agreed success criteria will be based on a list of predetermined test cases. The ability to increase the user count, duration, or scope of the PoC will require approval by Palo Alto Networks and Enablis, and additional charges may apply.

Table 1 – POC Test Cases Prisma Access Test Cases - POC 1 Test Security Profiles - Test policy to both block and allow traffic to specific file extensions

• Block mobile users to access high risk sites
• Confirm log forwarding for mobile users 2 Decryption - Build out SSL Decryption exemptions
• Test SSL Decrypt policy for visibility and nested App-IDs
• Validate SSL Decryption is occurring for in-scope traffic in traffic logs (view flag “decrypted eq yes”)
• Example of SSL decryptions is web-browsing over tcp/443 versus “ssl” 3 User and Application control - User-ID - Build a security policy which is composed of multiple rules which contain source user match criteria
• Block access to an application for a specific user or group, while allowing access for another user(s) and/or group
• Validate in traffic logs 4 Block Malware on Web Download and report - Build a security policy and include a best practices security profile group
• Navigate to Eicar site and demonstrate blocking of malware download
• Validate in Threat/Data Filtering logs 5 ADEM - Monitor and report on mobile users applications.
• Monitor and report on mobile users devices.
• Conduct testing from mobile users to SaaS applications.
• Provide a Mobile users experience score