WE PROVIDE COMPLETE VISIBILITY
Guardicore builds and displays an end-to-end map with both real-time and historical information. Prisma Cloud’s mapping capabilities are limited and do not assist with segmentation policy creation.
| VISIBILITY DEPTH & BREADTH | ||
|---|---|---|
| Agent-based activity discovery |  | |
| Agentless activity discovery | |  |
| Real-time & historical visualization of all communication | |  |
| Granular, live view of app components & communications | | |
| Automatic application dependency map generation | | |
| Visibility insights to aid policy development | | |
| Built-in tag synchronization with orchestration tools | | |
| POLICY CREATION AND ENFORCEMENT | ||
|---|---|---|
| Whitelist “Zero Trust” policy model | | |
| Blacklist policy model | | |
| Hybrid policy model | | |
| Automatic policy generation | | |
| Build and test policies before enforcement | | |
| Policy template library (e.g., Domain Controller, SharePoint, etc.) | | |
| Enforcement independent OS firewall | | |
| New workloads automatically inherit policies | | |
| Incorporates user identity in the security policy | | |
| Role-based views with policies scoped to application and location | | |
| SEGMENTATION GRANULARITY | ||
|---|---|---|
| Basic segmentation (geo, environment, zone) | | |
| Micro-segmentation (application by port, application tier, workload) | | |
| Container-level segmentation | | |
| BREACH DETECTION AND RESPONSE | ||
|---|---|---|
| Built-in reputation analysis for files, IP addresses, domains, and DNS | | |
| Deception/Honeypot capabilities | | |
| Incident response integration | | |
| Built-in threat intelligence firewall | | |
| Asset security history | | |
| ENVIRONMENT/OS SUPPORT | ||
|---|---|---|
| Support for legacy OSs (e.g. Win2003, CentOS 6, RHEL5) | | |
| Support for systems where agents cannot be deployed | | |
| Support for Windows XP, 7, 10 | | |
| GET A DEMO |
VISIBILITY DEPTH & BREADTH
| Agent-based activity discovery | |
|
|
| Agentless activity discovery | |
|
|
| Real-time & historical visualization of all communication | |
|
|
| Granular, live view of app components & communications | |
|
|
| Automatic application dependency map generation | |
|
|
| Visibility insights to aid policy development | |
|
|
| Built-in tag synchronization with orchestration tools | |
|
|
| Comprehensive list of filter options | |
|
|
POLICY CREATON AND ENFORCEMENT
| Whitelist “Zero Trust” policy model | |
|
|
| Blacklist policy model | |
|
|
| Hybrid policy model | |
|
|
| Automatic policy generation | |
|
|
| Build and test policies before enforcement | |
|
|
| Policy template library (e.g., Domain Controller, SharePoint, etc.) | |
|
|
| Enforcement independent OS firewall | |
|
|
| New workloads automatically inherit policies | |
|
|
| Incorporates user identity in the security policy | |
|
|
| Role-based views with policies scoped to application and location | |
|
|
SEGMENTATION GRANULARITY
| Basic segmentation (geo, environment, zone) | |
|
|
| Micro-segmentation (application by port, application tier, workload) | |
|
|
| Container-level segmentation | |
|
 |
BREACH DETECTION AND RESPONSE
| Built-in reputation analysis for files, IP addresses, domains, and DNS | |
|
|
| Deception/Honeypot capabilities | |
|
|
| Incident response integration | |
|
|
| Built-in threat intelligence firewall | |
|
|
| Asset security history | |
|
|
ENVIRONMENT/OS SUPPORT
| Support for legacy OSs (e.g. Win2003, CentOS 6, RHEL5) | |
|
|
| Support for systems where agents cannot be deployed | |
|
|
| Support for Windows XP, 7, 10 | |
|
|
Why Guardicore
“Our previous standard firewall policy had a five-day SLA for change requests. If you’re a developer working on a one week sprint and you’re waiting five days for a firewall to be opened up, that doesn’t align.””
Martijn Lohmeijer
Head of Infrastructure at Staples Solutions
“Guardicore enables us to enhance our overall data center security strategy and help our IT security team to avoid today’s advanced threats.”
Marino Aguiar
CIO, Santander Brasil
“Guardicore gives me the ability to immediately isolate process or connection-based anomalies and view them with unprecedented clarity.”
Michael Lamberg
Vice President and Chief Information Security Officer
See a Live Guardicore Centra Demo
Request a personalized Guardicore Centra demo and see first-hand why it’s a simpler, faster, and more cost-effective choice.
Learn More About Guardicore Centra
Securing Assets Using Micro-Segmentation: A SANS Review of Guardicore Centra
SANS analyst, Dave Shackleford, puts Guardicore Centra’s fast & easy-to-use micro-segmentation policies through their paces. Read the full report here.
Guardicore Presents at Security Field Day 2 – Part 3
Avishag Daniely, Director Product Management, and Dave Klein, Sr. Director Engineering and Architecture, demonstrate how Guardicore simplifies practical segmentation use cases.
The Definitive Guide to Choosing a Micro-Segmentation Solution
Learn the must-have elements in a micro-segmentation solution as you embark on this critical project to improve your cyber security posture.
© 2021 Guardicore
