About John_J

I'm testing enterprise DLP and I'm wondering how I can test source code?  I asked my SE and he gave me the following answer which explains what is done to inspect source code but not how to test source code:   "For document types such as 'source code', 'legal documents', 'financial documents', etc we leverage machine learning models to classify the data.   The ML models use a combination of test classification, RegEx, anomaly detection, NLP, token analysis, semantic analysis and others."   When testing data like credit card numbers, SSNs, or sensitivity labels it is simple to create a rule, pass traffic, and know which data should be stopped and which data should be permitted.  When testing source code I have no idea what should be permitted and what should be blocked by DLP.   Has anyone tested source code in eDLP? If so, how are you testing it? Does anyone know what types of data in source code should be blocked?   Thanks for the help! -John ... View more

Does anyone know where in this processing flow does Advanced WildFire Inline ML take place.  It would be before the file is sent to WildFire Cloud but would the file be inspected before or after checking the file size?   Also, are email links inspected by Advanced WildFire Inline ML?  From my understanding email links use dynamic analysis in WildFire Cloud which isn't the same as Inline ML.     Thanks, John ... View more

I am looking to integrate our Palo Alto firewalls with HSMs in both our Azure and AWS environments.  It looks like Thales SafeNet network HSMs are supported in both of these environments.  Does anyone have any experience using a HSM in either Azure or AWS?  What HSM are you using in these environments?   Thanks! ... View more

I'm doing a cost analysis on multiple AWS security tools and Prisma Cloud Enterprise.  From looking at the Prisma Cloud Admin Guide it looks like we can ingest logs from Amazon GuardDuty, AWS Inspector, and AWS Security Hub.  Can Prisma Cloud Enterprise perform the same security functions as these tools or does it need to use these tools to perform their respective security functions?   For example, can Prisma Cloud Enterprise perform threat detection without the use of GuardDuty?   If Prisma Cloud Enterprise can perform threat detection without ingesting logs from GuardDuty is there a significant benefit to having threat detection from both Prisma Cloud Enterprise and GuardDuty?   Thanks!     ... View more