Welcome to our November 2023 Rewind, where we review some of LIVEcommunity’s biggest headlines from the past month! In November, we featured articles and blogs on: building a scalable self-managed streaming infrastructure, registering for the latest PAN-OS® 11.1 Cosmos learning event, enabling live captioning on your computer, a new member spotlight, various Cortex Playbooks, new PANCast episodes and much more! Read on to see community's November 2023 highlights. New Engineering Blog Section on LIVEcommunity! Discover in-depth technical insights on our journey to create robust, scalable systems and deliver cutting-edge cybersecurity solutions. Explore our innovations and gain a deeper understanding of Palo Alto Networks Engineering. Read the first engineering blog in this series and don’t forget to subscribe to the new Engineering Blog section to read the latest! How to Build a Scalable Self-Managed Streaming Infrastructure with Flink - Part 1In this blog series, Talat Uyarer (Senior Principal Engineer) , Rishabh Kedia (Principal Engineer) , and David He (Engineering Director) will describe how we built a self-managed streaming platform and our learnings. In part I, we describe how we built a large-scale self-managed streaming infrastructure and services based on Flink, by migrating from a cloud-managed streaming service, and the learnings for operational scalability and observability, performance, and cost effectiveness. We summarize useful techniques and experience in our journey. Other Interesting Highlights Register Today: Learn How to Out-Innovate Zero-Day Threats with Inline AI-powered Security!Cyberthreats today are becoming more agile and harder to detect with the sophisticated tools and resources at the hands of attackers, including the use of AI for malicious activity, red team tools and much more. There has been a significant increase in advanced and never-before-seen threats. It’s clear that modern network security requires a new approach. To stay ahead of adversaries, Palo Alto Networks introduces PAN-OS® 11.1 Cosmos, the latest version of its industry-leading PAN-OS software. Register Now! Upcoming DatesAmericasFebruary 13, 202410–11:30 AM PSTEuropeFebruary 15, 202410–11:30 AM CET Enabling Live Captioning Did you know you can enable Live Caption on your computer? If you have an Apple Silicon Mac, Windows 11 version 22H2 or higher, or use the Google Chrome browser you can whip up captions for your videos, podcasts, live streams, video chats, and more – it's like magic for your ears! And the best part? Everything happens right on your device, so it's all super private and secure. What Are Applications and Services? What are applications and services in the security policy? Is there a difference? Find out more by reading our blog… Attack Surfaces and Identity Threat Detection Continues to EvolveThe landscape of cybersecurity, attack surfaces, and identity threat detection has continued to evolve over the past couple of years. Read more to review some of these aspects and how Palo Alto Networks is positioned to help protect against these threats. LIVEcommunity November Member Spotlight: @MassaitoFor the November 2023 Member Spotlight, we’d like to applaud one of our community members, @massaito, for their participation and engagement in the LIVEcommunity. New Advanced URL Filtering Category: Scanning Activity (Update)We introduced a new category called “Scanning Activity” under Advanced URL Filtering. By default, we set the “Scanning Activity” category to “Block” mode for the default profile only. If you have multiple URL Filtering profiles, we recommend that you change the default action to “Block” for this category in each of your profiles. Read our blog to learn more and see the latest updates… XSIAM 2.0: Continuing to Drive SOC TransformationSecurity teams have an important and difficult job – protecting their organizations from a threat landscape that is constantly changing. Based on investigations conducted by our Unit 42 team, we know that threat actors are carrying out end-to-end attacks faster, from initial compromise, all the way to data exfiltration in just a matter of hours. Considering that companies take an average of 5.5 days to initially contain an incident once discovered, this increases the pressure on security teams to get things right as quickly as possible New Features Introduced in Prisma Access 5.0We've got the lowdown on Prisma Access' latest features, plus some tips on upgrades and changes to how things work compared to the older Prisma Access releases. Dive in and stay in the know! Schema Name Changes for Cortex Data Lake (CDL) CustomersThe Cortex Data Lake team has identified opportunities to simplify your logging experience by reconciling field names across log types. These changes will affect how names will be displayed in the log viewer and how they will be forwarded. To learn more, read our latest blog… From Zero to Process to XSOAR Playbook XSOAR is a Security Orchestration, Automation and Response platform. Generally speaking, this means that we perform the right response, orchestrated from a central platform, while automating the annoying and repeatable tasks which slow us down. Using the commonly known language and used Incident Response Cycle, XSOAR strives in the area of analysis, containment and remediation. As a great feature, our Playbook design tool also follows the standard flow diagram model from Process and Use Case design. Playbook of the Week: Streamlining the Management of XDR Incidents The new Cortex XDR Lite - Incident Handling playbook is a new addition to the Palo Alto Networks Cortex XDR - Investigation and Response content pack. Used as the default playbook in this content pack, it streamlines incident response workflows for Cortex XDR incidents ingested into XSOAR, automating manual tasks associated with the enrichment, investigation and resolution of Cortex XDR incidents. Easy to deploy and with no additional integrations needed, this playbook can significantly reduce the time your analysts spend remediating XDR incidents. Deploying Cloud NGFW for Azure using TerraformCloud NGFW for Azure is natively integrated into the Azure Resource Manager framework and does not require the use of any vendor-specific APIs for deployment. In this blog, you will learn how to deploy and configure the Cloud NGFW resource using Terraform. Since Cloud NGFW is directly exposed in the Azure Portal and Azure APIs as a native service, it only requires the Azure Terraform Provider to deploy and configure the resource. New PANCast Episodes Are Out! PANCast is a Palo Alto Networks podcast that provides actionable insights from cybersecurity experts to customers, helping them ensure each day is more secure than the one before it. Visit our PANCast homepage to learn more and watch our previous podcasts in this series. PANCast™ Episode 30: What is Runtime Defense Protection? PANCast™ Episode 31: WAAS, How Could It Help Us? Stay in the Loop Be sure to subscribe to our News section to stay up-to-date on LIVEcommunity news, updates, and more!
