Bytes Software Services

Palo Alto Prisma Access

Prisma Access is a cloud-based security service that provides organizations with secure access to applications and data from anywhere. It offers advanced security features like threat prevention, URL filtering, and encryption to protect against cyber threats. bssgc

Features

• . Cloud-based security
• Secure remote access
• Threat prevention
• URL filtering
• Advanced encryption
• Zero-trust network security
• Cloud-delivered firewall
• Global scalability
• Application segmentation
• Centralized management and visibility

Benefits

• Improved security posture
• Enhanced remote workforce productivity
• Simplified network infrastructure
• Reduced complexity and operational costs
• Scalability for business growth
• Protection against advanced cyber threats
• Seamless user experience
• Elimination of backhauling traffic
• Centralized policy management and visibility
• Compliance with regulatory requirements

£15 a unit

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

590439938950691

Contact

Chris Swani
+44 (0) 7951 326815
tenders@bytes.co.uk

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: 1. Virtual Private Network (VPN); 2. Next-Generation Firewall (NGFW); 3. Secure Web Gateway (SWG); 4. Cloud Access Security Broker (CASB); 5. Zero Trust Network Access (ZTNA); 6. Data Loss Prevention (DLP); 7. Threat Intelligence; 8. Network Access Control (NAC); 9. Secure Email Gateway (SEG); 10. Mobile Device Management (MDM)
• Cloud deployment model: Public cloud
• Service constraints: Dependency on internet connectivity: Prisma Access relies on a stable and reliable internet connection for proper functionality. It may have compatibility limitations with certain legacy systems or software. Implementing and maintaining Prisma Access may involve additional expenses for licensing, infrastructure, and ongoing support. Proper configuration and setup require technical expertise and time investment. Organizations may need to provide training to employees for effective and secure use of the service. Availability and coverage of Prisma Access may vary based on geographical locations.; Organizations using Prisma Access rely on the service provider's infrastructure and support.
• System requirements:
  • Laptops, desktops, mobile devices, and IoT devices.
  • Windows, macOS, Linux, iOS, and Android.
  • A stable and reliable internet connection
  • Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.
  • Organizations need to have a compatible network infrastructure
  • May need to install and configure a VPN client software

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: SLA for Support-related response times are dependant on the level of support purchased with the service.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Palo Alto Networks offers three support levels: Standard, Premium, and Elite. The Standard level provides 8x5 access to technical support, software updates, and hardware replacement. The Premium level offers 24x7 access to technical support, along with additional features such as designated support engineers and proactive monitoring. The Elite level includes all Premium features, as well as faster response times and personalized support services. Each level is designed to meet varying customer needs and service level requirements.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Palo Alto Networks assists users in starting to use Prisma Access through comprehensive documentation, technical support, training programs, and professional services. They provide step-by-step guides for setup and configuration, offer assistance and troubleshooting, educate users through training resources, and offer consulting services for a smooth deployment. Additionally, they foster a user community for collaboration and knowledge sharing. These efforts ensure that users have the necessary resources and support to effectively implement and utilize Prisma Access.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Online Help
  • Knowledge Base Articles
  • Video Tutorials
  • Interactive Demos
  • Webinars
  • Whitepapers
  • API Documentation
  • Configuration Guides
  • Case Studies
  • Release Notes
• End-of-contract data extraction: When a Prisma Access contract ends, users have different options to extract their data and ensure a smooth transition. Here are some steps users can take:; ; 1. Data Backup: Before the contract ends, it is crucial to perform a comprehensive data backup. This includes saving any configuration files, security policies, user profiles, and other relevant data associated with Prisma Access.; ; 2. Export Logs and Reports: Users should extract logs, reports, and any other relevant data generated by Prisma Access during the contract period. This information can be essential for compliance, auditing, or historical analysis purposes.; ; 3. Data Migration: If users plan to transition to a different solution or platform, they should explore data migration options. This may involve exporting and converting configurations, policies, and user data to a format compatible with the new platform.; ; 4. Vendor Assistance
• End-of-contract process: "At the end of a Prisma Access contract, the services provided by Prisma Access will cease. The contract will reach its agreed-upon end date, and the customer will no longer have access to the Prisma Access platform and its associated features and benefits. The customer will need to make alternative arrangements for their network security needs.

Using the service

• Web browser interface: Yes
• Supported browsers: Opera
• Application to install: Yes
• Compatible operating systems: Windows Phone
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: N/A
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The service interface for Prisma Access is primarily accessed and managed through the Strata Cloud Management console, which is a web-based interface. The management console provides a centralized platform for administrators to configure and monitor the Prisma Access service. Through this interface, administrators can manage security policies, view logs and analytics, configure user access, and perform other administrative tasks related to the Prisma Access service.
• Accessibility standards: None or don’t know
• Description of accessibility: Prisma Access Strata Cloud Manager is accessed via any web browser.
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: With Prisma Access APIs, users can programmatically interact with and automate various aspects of the Prisma Access service. Here are some examples:; ; 1. Configuration Management: Users can use APIs to automate the configuration of various settings and policies within the Prisma Access service. This includes managing network and security policies, user access controls, and other configuration parameters.; ; 2. User Provisioning and Authentication: APIs allow users to programmatically onboard and provision users, manage user roles and permissions, and authenticate users accessing the Prisma Access service.; ; 3. Reporting and Analytics: Users can leverage APIs to retrieve logs, statistics, and other data related to network traffic, security events, and user activity. This enables custom reporting, analysis, and integration with third-party tools.; ; 4. Integration with Security Ecosystem: Prisma Access APIs enable integration with other security solutions and services. Users can integrate Prisma Access with SIEM (Security Information and Event Management) systems, threat intelligence platforms, or custom security workflows to enhance their overall security posture.; ; 5. Monitoring and Alerting: APIs allow users to monitor the health and performance of the Prisma Access service by retrieving real-time status, metrics, and alerts. This helps in proactive monitoring and incident response.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Yes, users can customize the Prisma Access service to align with their specific requirements. They can define and customize security policies, user access controls, network segmentation, and integrate it with their existing security ecosystem. Additionally, users can customize reporting and analytics to generate insights based on their unique needs. It's important to note that the extent of customization may vary based on the specific features and licensing agreement. Users should refer to the documentation provided by Palo Alto Networks for detailed information on customization options and limitations.

Scaling

• Independence of resources: Prisma Access utilizes a distributed architecture and scalable infrastructure to ensure that users are not affected by the demand placed by other users on the service. It dynamically allocates resources based on demand to maintain optimal performance and availability. Load balancing techniques are employed to distribute traffic evenly across multiple servers and data centres. Additionally, Prisma Access leverages advanced traffic management and prioritization mechanisms to ensure that critical applications and users receive the necessary resources and are not negatively impacted by other users' activities.

Analytics

• Service usage metrics: Yes
• Metrics types: 1. User activity and behavior monitoring.; 2. Application usage and performance tracking.; 3. Network bandwidth consumption analysis.; 4. Threat detection and prevention metrics.; 5. VPN tunnel utilization and performance monitoring.; 6. User authentication and access control metrics.; 7. Firewall rule effectiveness and usage metrics.; 8. Web filtering and content inspection statistics.; 9. Incident response and security incident metrics.; 10. Compliance and regulatory reporting metrics.
• Reporting types: Regular reports

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Palo Alto

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: Service are supplied from Google and Amazon Data centers (further information to follow); Google Security statement; https://cloud.google.com/security/overview/ ; https://cloud.google.com/security/; ; AWS Security Statement; https://aws.amazon.com/compliance/data-center/controls/ ; https://d1.awsstatic.com/whitepapers/aws-security-whitepaper; https://aws.amazon.com/compliance/data-center/data-centers/; ; All logs are stored in the Cortex data lake, user activity is monitored and stored in the Cortex data lake for the agreed retention period.
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export data from Prisma Access by logging into the management console, navigating to the desired data section, selecting the export format (e.g., CSV, PDF, JSON), specifying any parameters, and initiating the export process. Upon completion, users can download the exported file or receive a download link via email. Specific steps and options may vary, so it's advisable to consult the official documentation or Palo Alto Networks support for detailed instructions based on the specific setup.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • JSON
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • JSON
  • XML

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: Prisma Access combines segmentation, firewall controls, encryption, and advanced threat detection mechanisms to safeguard data within our network, reducing the risk of data breaches and ensuring the confidentiality and integrity of the information.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Prisma Access protects data within the network through segmentation, advanced firewall controls, encryption, and threat detection. Segmentation isolates network parts to prevent threats from spreading. Advanced firewalls monitor and control traffic with intrusion prevention and deep packet inspection. Robust encryption secures data at rest and in transit. Threat intelligence and machine learning identify and mitigate risks. Prisma Access actively monitors traffic, detects anomalies, and responds to threats. These measures reduce the risk of data breaches, ensuring data confidentiality and integrity within the network.

Availability and resilience

• Guaranteed availability: Palo Alto Networks aims to maintain at least 99.99% availability for Prisma Access. If this commitment is not met, customers may be eligible for a service credit. Monthly uptime availability is calculated by subtracting the percentage of downtime, excluding planned or emergency outages. To claim a service credit, customers must open a case within 24 hours of an outage and submit a claim within 5 business days. Palo Alto Networks will promptly review the claim within 15 days after determining the root cause and closing the case.
• Approach to resilience: Prisma Access is designed with built-in resiliency to ensure continuous and reliable network security. It employs several key mechanisms to enhance its resilience.; ; Firstly, Prisma Access utilises a global network of Points of Presence (PoPs) strategically distributed across different regions. This distributed architecture enables load balancing and automatic failover, ensuring uninterrupted service even in the event of a localised failure.; ; Secondly, Prisma Access incorporates redundant components and multiple layers of fault tolerance. This includes redundant hardware, network connections, and power supplies, minimising the impact of hardware failures and ensuring high availability.; ; Thirdly, Prisma Access leverages dynamic routing protocols and intelligent traffic management algorithms. These mechanisms allow for efficient rerouting of traffic in the event of network congestion or failure, optimising performance and maintaining connectivity.; ; Moreover, Prisma Access employs proactive monitoring and alerting systems to promptly detect and respond to any issues or anomalies. This enables quick identification and resolution of potential problems, minimising downtime and maximising uptime.; ; Overall, the combination of distributed architecture, redundancy, fault tolerance, intelligent routing, and proactive monitoring makes Prisma Access resilient to disruptions, ensuring continuous and reliable network security for organisations.
• Outage reporting: Prisma Access provides various mechanisms to report service outages and communicate with customers regarding any disruptions or incidents.; ; Firstly, Palo Alto Networks maintains a dedicated status page or portal where customers can access real-time information about the status of Prisma Access services. This status page provides updates on any ongoing incidents, maintenance activities, or service outages.; ; Additionally, Prisma Access offers proactive monitoring and alerting capabilities. Palo Alto Networks monitors the service infrastructure and network health to promptly detect any issues or potential outages. In the event of a service outage, customers may receive automated notifications or alerts via email, SMS, or through the Prisma Access management console.; ; Furthermore, customers can also reach out to Palo Alto Networks' support team directly for assistance and information regarding service outages. The support team is available to provide timely updates, answer queries, and address any concerns related to service disruptions.; ; By utilising these reporting mechanisms, Prisma Access ensures transparent communication and keeps customers informed about any service outages or incidents, enabling them to take necessary actions and plan accordingly.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to Prisma Access management interfaces and support channels is restricted through role-based access control (RBAC) and two-factor authentication (2FA). RBAC ensures that only authorized users with specific roles and permissions can access and perform actions within these interfaces. 2FA adds an extra layer of security by requiring users to provide additional authentication factors such as one-time passwords (OTPs) or mobile authentication apps. These measures help restrict access to authorised personnel and protect sensitive functionalities and data.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: N/A
• ISO/IEC 27001 accreditation date: N/A
• What the ISO/IEC 27001 doesn’t cover: "Palo Alto Network's overarching information security program is aligned to ISO 27001/2, and includes key controls from HIPAA, PCI and SOC2 we maintain certification against ISO 27001, ISO 27017, ISO 27018; ISO 27701To ensure high quality and reliability, our factory certifications do however include: ISO 9001:2008, ISO 14001:2004, AS9100, TL 9000, ANSI ESD S20:20-2007, ISO 1384:2003. All products are UL and TUV certified and have undergone Electromagnetic emissions and immunity testing."
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: N/A
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: N/A
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • SOC2
  • Fedramp
  • Common Criteria
  • FIPS 140-2
  • NCSC Foundation Grade Certification.

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Palo Alto Networks has a formal Enterprise Risk Management program, which includes the performance of an annual risk assessment, with periodic updates, as applicable, to identify and assess key risks and their mitigation approaches. The scope of the program encompasses information security risks and product risks. Our security program consists of a risk-based approach that includes administrative, technical and physical safeguards reasonably designed to protect the confidentiality, integrity and availability of customer data. Palo Alto Network's information security program is aligned to ISO 27001/2, and includes key controls from HIPAA, PCI and SOC2.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Both Palo Alto Networks and the end-user organisation are in full control of their relevant and respective change control processes.; Additional details are available upon request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Prisma Access follows a proactive vulnerability management process to identify, assess, prioritize, and mitigate vulnerabilities:; ; 1. Identification: Regular scanning and assessment are conducted to identify vulnerabilities.; 2. Assessment: Vulnerabilities are evaluated for severity and potential impact.; 3. Prioritization: Vulnerabilities are assigned priority levels based on severity and impact.; 4. Mitigation Planning: A plan is developed to address vulnerabilities.; 5. Remediation: The plan is executed, coordinating with relevant teams.; 6. Monitoring and Reporting: Ongoing monitoring and reporting track progress in vulnerability remediation efforts.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Prisma Access employs continuous monitoring and analysis of system activities, network traffic, and user behavior to detect and respond to potential security incidents
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: This information is available upon request

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  We take our environmental management and the impact we have on the environment very seriously. We have environmental policies in place and hold the ISO14001 accreditation. Our environmental assessments are conducted annually by an external Lead ESOS Assessor; they are signed-off by the board and compliance reported to the regulator (the Environment Agency). Our environmental policy is published on our website at https://www.bytes.co.uk/company/sustainability/environmental.; Bytes achieved carbon net zero in March 2022 through approved carbon offsetting schemes. We are always seeking to reduce our impact on the environment. We aim to minimise waste, reduce pollutants and use renewable materials. Our offices have recycling facilities for cans, plastic and paper. We aim to reduce our office printing to zero within the next few years. ; An Environmental Steering Committee has been established to coordinate environmental activities and drive change.; To drastically reduce our emissions, we have switched to renewable energy. Our Head Office has reached our first milestone of using a specialist 100% renewable electricity provider. We are also exploring options to install solar panels on our Headquarters building.; Other environmental initiatives include installing electric vehicle charging points and encouraging staff to commute to work without the car (setting up a car share network and installing secure cycle parking).; We produce a SECR (Streamlined Energy and Carbon Reporting) report that details the companies energy consumption and carbon emissions. This report is produced annually by an independent assessor. ; This report provides details of our emissions in Scope 1, 2 and 3 categories. It details the activities previously taken to reduce emissions and also recommendations for further improvements.; For scope 1,2 and 3 emissions we aim to reduce these by 50% by 2025-2026 from our 2021 baseline.; We aim to be Net Zero by 2040, covering our own operational emissions.

Pricing

• Price: £15 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bytes.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.