Instant messaging and open communications applications such as Skype, deliberately channel-hop to avoid detection by traditional firewalls, and allow users to send out attachments without being noticed.
Now a new arrival in the U.K. is promising to provide systems administrators with a clear picture of all applications, even those that try to avoid firewalls.
By corresponding users to Active Directory, the system is also able to report on and track the application users, rather than just providing an IP address.
Jones said the systems grade applications on a scale of 1 to 5 according to their apparent risk – channel-hopping to evade detection would be one risk factor, for instance. It is then up to the systems administrators to decide to block or allow use of the applications, or just to allow certain users to access the application.
The company appointed Vadition Ltd., a Web 2.0 and social networking value-added reseller, as its U.K. distributor, and has won its first U.K. sale at Wellington College in Berkshire.
Palo Alto comes with an impressive pedigree. It was founded in 2005 by CTO Nir Zuk, a former principal engineer at Check Point Software Technologies Ltd. where he helped develop stateful inspection in firewalls. He went on to co-found OneSecure Inc., a pioneer in intrusion prevention, and was CTO at NetScreen Technologies Inc., which was acquired by Juniper Networks Inc, a California-based vendor of network security products, in 2004.