Palo Alto Networks, Inc. · NASDAQ:PANW

Palo Alto Networks — Investor Presentation (December 2012)

19 slides from Palo Alto Networks's investor presentation, December 2012

1. Slide 1: Palo Alto Networks Product Overview

   Palo Alto Networks Product Overview [insert name] December 2012

2. Slide 2: Palo Alto Networks at a Glance

   Palo Alto Networks at a Glance Corporate highlights Revenue $MM Founded in 2005; first customer shipment in 2007 $300 $255 $250 $200 $150 $119 Safely enabling applications $100 $49 $50 $13 $0 Able to address all network security needs FY09 FY10 FY11 FY12 FYE July Enterprise customers Exceptional abi

3. Slide 3: Applications Have Changed, Firewalls Haven’t

   Applications Have Changed, Firewalls Haven’t Network security policy is enforced at the firewall • Sees all traffic • Defines boundary • Enables access Traditional firewalls don’t work any more 4 | ©2012, Palo Alto Networks. Confidential and Proprietary.

4. Slide 4: Applications: Threat Vector and a Target

   Applications: Threat Vector and a Target Threats target applications • Used as a delivery mechanism • Application specific exploits 5 | ©2012, Palo Alto Networks. Confidential and Proprietary.

5. Slide 5: Applications: Payload Delivery/Command & Control

   Applications: Payload Delivery/Command & Control Applications provide exfiltration • Confidential data • Threat communication 6 | ©2012, Palo Alto Networks. Confidential and Proprietary.

6. Slide 6: Encrypted Applications: Unseen by Firewalls

   Encrypted Applications: Unseen by Firewalls What happens traffic is encrypted? • SSL • Proprietary encryption 7 | ©2012, Palo Alto Networks. Confidential and Proprietary.

7. Slide 7: Technology Sprawl and Creep Aren’t the Answer

   Technology Sprawl and Creep Aren’t the Answer • “More stuff” doesn’t solve the problem • Firewall “helpers” have limited view of traffic • Complex and costly to buy and maintain • Doesn’t address applications UTM Internet IPS DLP IM AV URL Proxy Enterprise Network 8 | ©2012, Palo Alto Networks. Conf

8. Slide 8: The Answer? Make the Firewall Do Its Job

   The Answer? Make the Firewall Do Its Job 1. Identify applications regardless of port, protocol, evasive tactic or SSL 2. Identify and control users regardless of IP address, location, or device 3. Protect against known and unknown application-borne threats 4. Fine-grained visibility and policy contr

9. Slide 9: Why Visibility & Control Must Be In The Firewall

   Why Visibility & Control Must Be In The Firewall Application Control as an Add-on Traffic Port • Port-based FW + App Ctrl (IPS) = two policies • Applications are threats; only block what you expressly look for Firewall IPS Implications Applications • Network access decision is made with no informati

10. Slide 10: Differentiating: App-ID vs. Two Step Scanning

    Differentiating: App-ID vs. Two Step Scanning 300 or more applications Traffic 300 or more applications Allow port 80 traffic 300 or more applications Firewall IPS Applications Port Policy App Ctrl Policy Decision Decision  Operational ramifications of two step scanning  Two separate policies with

11. Slide 11: Enabling Applications, Users and Content

    Enabling Applications, Users and Content 12 | ©2012, Palo Alto Networks. Confidential and Proprietary.

12. Slide 12: Making the Firewall a Business Enablement Tool

    Making the Firewall a Business Enablement Tool  Applications: Enablement begins with application classification by App-ID.  Users: Tying users and devices, regardless of location, to applications with User-ID and GlobalProtect.  Content: Scanning content and protecting against all threats, both k

13. Slide 13: Single Pass Platform Architecture

    Single Pass Platform Architecture 14 | ©2012, Palo Alto Networks. Confidential and Proprietary.

14. Slide 14: PAN-OS Core Firewall Features

    PAN-OS Core Firewall Features Safe enablement of applications, users and content complement core firewall features  Strong networking foundation  Zone-based architecture  Dynamic routing (BGP, OSPF, RIPv2)  All interfaces assigned to security zones for  Tap mode – connect to SPAN port policy en

15. Slide 15: Next-Generation Firewall Virtualized Platforms

    Next-Generation Firewall Virtualized Platforms Performance Cores Allocated Firewall (App-ID) Threat Prevention VPN Sessions per Second 2 Core 500 Mbps 200 Mbps 100 Mbps 8,000 4 Core 1 Gbps 600 Mbps 250 Mbps 8,000 8 Core 1 Gbps 1 Gbps 400 Mbps 8,000 Specifications Model Sessions Rules Security Zones

16. Slide 16: Distributed Enterprise

    Enterprise-wide Next-Generation Firewall Security • App visibility • Network • Consistent Perimeter Data Center Enterprise Distributed and control in segmentation network the firewall • Based on security • All apps, all application and everywhere ports, all the user, not port/IP • HQ/branch time • S

17. Slide 17: Addresses Three Key Business Problems

    Addresses Three Key Business Problems  Safely Enable Applications  Identify more than 1,500 applications, regardless of port, protocol, encryption, or evasive tactic  Fine-grained control over applications/application functions (allow, deny, limit, scan, shape)  Addresses the key deficiencies of

18. Slide 18: Many Third Parties Reach Same Conclusion

    Many Third Parties Reach Same Conclusion  Gartner Enterprise Network Firewall Magic Quadrant  Palo Alto Networks leading the market  Forrester IPS Market Overview  Strong IPS solution; demonstrates effective consolidation  NetworkWorld Test  Most stringent NGFW test to date; validated sustaine

19. Slide 19: Thank You

    Thank You © 2010 Palo Alto Networks. Proprietary and Page 20 |

Palo Alto Networks — Investor Presentation (December 2012) on 6ix