Palo Alto Networks' revolutionary next-generation firewalls enable enterprises to see and control applications, users and content. They empower enterprises to create granular, business-relevant security policies and safely control new applications as business enablers instead of the block-or-nothing approach offered by traditional port-blocking firewalls.

Palo Alto Networks takes advantage of the user and user-group information inside Active Directory and maps it to IP addresses on the network. The firewall can identify all traffic by the user and the user group instead of just the IP address.

The PA-4000 Series Application Command Center provides a real-time display of application traffic flowing across the network by user or group name. Your organization can use the ACC’s rules-based editor to create, review and deploy more targeted usage policies.