Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Palo Alto Networks next-generation firewall (NGFW) |
| Integration method | DeRISK supports the native XML device state export from each local firewall appliance. |
| Data used | Network zones, security policies (who may talk to whom) |
| Built and supported by | DeNexus |
| DeRISK grades supported | Level 4 · Evidence-Grade (facility data) and Level 5 · Engineering-Grade (zone data), as each grade becomes available |
The challenge
Firewalls are often the main control between IT and OT, and between OT zones. Their rules hold real evidence about exposure. That evidence rarely reaches the people deciding where to spend on risk.
How it works
The NGFW enforces zones and security policies between OT, IT and the internet.
DeRISK CRQ reads those zones and policies from each firewall’s native XML device state export.
DeRISK combines them with vulnerability data from monitoring or scanning tools, where available.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Firewall evidence in the risk model.
Your zones and policies become part of the evidence behind each facility’s results.
Vulnerabilities in context.
When firewall data is available with vulnerability data, DeRISK uses the firewall data to determine which vulnerabilities are mitigated by its policies.
Better-informed projects.
Compare segmentation changes with other mitigation options before you spend.
Requirements
- Palo Alto Networks NGFW protecting OT networks
- The native XML device state export from each local firewall appliance
- A DeRISK CRQ subscription at Evidence-Grade or Engineering-Grade, as each grade becomes available
- For vulnerability context: an OT monitoring or vulnerability tool, such as the partners on this page
About Palo Alto Networks
As the global AI and cybersecurity leader, Palo Alto Networks (NASDAQ: PANW) is dedicated to protecting our digital way of life via continuous innovation. Trusted by more than 70,000 organizations worldwide, we provide comprehensive AI-powered security solutions across network, cloud, security operations and AI, enhanced by the expertise and threat intelligence of Unit 42®. Our focus on platformization allows enterprises to streamline security at scale, ensuring protection fuels innovation.