Strata Cloud Manager
New Features in August 2024
Table of Contents
New Features in August 2024
Here are the new features available in Strata Cloud Manager in August
2024.
Here are the latest new features introduced on Strata Cloud Manager. Features listed here
include some feature highlights for the products supported with Strata Cloud Manager.
For the full list of new features supported for a product you're using with Strata Cloud
Manager, see the release notes for that product
AI Access Security
|
August 16, 2024
Supported for:
|
We introduced AI Access Security to enable businesses to safely adopt GenAI apps across
their organization by mitigating the risks associated with data leakage in prompts
and malicious content in responses. AI Access Security includes an
extensive dictionary of generative artificial intelligence (GenAI) apps to help you
identify GenAI apps alongside contextual, fine-grained access control policy rules
to help you prevent exfiltration of sensitive data. AI Access Security
also provides detailed monitoring capabilities that enable you to filter for
specific GenAI apps, users, and GenAI use cases, which in turn enables you to write
targeted Security policy rules to strengthen your security posture that help you
control the data leaving your organization for GenAI apps allowed within your
organization.
GenAI apps are AI apps capable of generating text, images, videos, and other forms of
data in response to user prompts and continuously learn based on user inputs. Their
usage is proliferating at an astonishing rate and offer limitless opportunities for
businesses. However, the nature by which GenAI apps contentiously improve presents a
new danger to businesses and security administrators — how can you ensure your
employees are not exposing sensitive or proprietary data to GenAI apps?
AI Access Security is powered by three core principals that allow your
organization to safely use GenAI apps while ensuring your sensitive or proprietary
data isn't exposed.
- Identify and Control GenAI Apps—AI Access Security provides robust GenAI app taxonomy, attributes, and access control tools to identify and manage which GenAI apps are sanctioned, tolerated, or unsanctioned in your corporate network.
- Comprehensive Visualization and Reporting—Your manage AI Access Security entirely from Strata Cloud Manager—your single pane of glass management experience across your security enforcement channels. AI Access Security includes a detailed dashboard that displays trends that help you to filter and explore usage based on users, data transfers, GenAI apps, and use cases across all channels. You can also generate executive summary reports to summarize GenAI app usage, policy violation metrics, and other important data security metrics.
- Data Protection—Enterprise Data Loss Prevention (E-DLP), the Palo Alto Networks cloud-based data loss prevention service that uses AI and supervised machine learning algorithms, is the detection engine that enables you to prevent the exfiltration of sensitive data for file and non-file based uploads and text prompts.
Streamlined NGFW Incidents and Alerts Management
|
August 15, 2024
Supported for:
|
The Incidents &
Alerts page now provides a direct access to a detailed list
of your Next-Generation Firewalls (NGFWs) alerts and incidents alongside critical
visual summaries, which eliminates the need for any additional steps to access the
list view. This enhancement streamlines your workflow and provides quicker access to
details without losing the overall context.
Prisma Access Browser
|
August 12, 2024
Supported for:
|
The Prisma Access Secure Enterprise Browser (Prisma Access Browser) is a browser
designed specifically for enterprise use and is fortified with security features to
protect users and organizations against cyberthreats like phishing, malware,
eavesdropping, and data exfiltration.
The initial release of Prisma Access Browser includes the following:
- Third-Party Access: contractors, partners, consumers, or students needing secure access to SaaS or private web apps on their unmanaged devices.
- Bring Your Own Device Access: employees using personal devices (mostly mobile) for work.
- Temporary Secure Access: employees needing access to critical apps, such as Human Resources and Payroll, during agent rollouts or network merges.
- Secure Access for managed devices: employees using work devices accessing highly sensitive data.
More about Prisma Access Browser.
You can create and manage role-based access control for different types of
administrators of the Prisma Access Browser. This allows the main administrator in a
large organization to appoint additional administrators with relevant permissions
for their specific roles, including visibility and access.
After activating your Prisma Access Browser license, you can manage admin user access
and assign one of the following roles that are specific to Prisma Access
Browser.
More about roles and permissions and assigning predefined roles.
| Enterprise Roles | Permissions | Supported Applications |
|---|---|---|
| PA Browser Access & Data Administrator |
Read & write access to set and manage access & data
policies, defining custom or private applications, handling end
user requests related to policies and read-only permission to
inventory aspects (users, devices, extensions) and to any
visibility aspects (dashboards, end-user events) within the
Prisma Access Browser management sections
|
|
| PA Browser Customization Administrator |
Read & write access to set and manage browser customization
policies, and read-only permission to inventory aspects (users,
devices, applications, extensions) and to any visibility aspects
(dashboards, end-user events) within the Prisma Access Browser
management sections.
|
|
| PA Browser Permission Request Administrator | Read & write access to handle end user requests related to policies and read-only permission to visibility aspects (dashboards, end-user events) within the Prisma Access Browser management sections. |
|
| PA Browser Security Administrator | Read & write access to set and manage browser security policies, and read-only permission to inventory aspects (users, devices, applications, extensions) and to any visibility aspects (dashboards, end-user events) within the Prisma Access Browser management sections. |
|
| PA Browser Security & Device Posture Administrator | Read & write access to set and manage browser security policies, manage device posture groups and set sign-in rules. It also provides read-only permission to inventory aspects (users, applications, extensions) and to any visibility aspects (dashboards, end-user events) within the Prisma Access Browser management sections. |
|
| PA Browser View Only Analytics | Read access to any visibility aspects within the Prisma Access Browser management sections, including dashboards, detailed end-user events and inventory aspects (users, devices, applications, and extensions). |
|