Sony Pixel Power calrec Sony

NVIDIA and Palo Alto Networks Boost Cyber Defenses with DPU Acceleration

12/07/2021

Cybercrime cost the American public more than $4 billion in reported losses over the course of 2020, according to the FBI.

To stay ahead of emerging threats, Palo Alto Networks, a global cybersecurity leader, has developed the first virtual next-generation firewall (NGFW) designed to be accelerated by NVIDIA's BlueField data processing unit (DPU).

The DPU accelerates packet filtering and forwarding by offloading traffic from the host processor to dedicated hardware that is separate from the server CPU. The solution delivers the intrusion prevention and advanced security capabilities of Palo Alto Networks' virtual NGFWs to every server without sacrificing network performance. It also allows network flows that were previously impossible or impractical to inspect by intelligently screening the relevant parts of the flow and offloading the rest to the DPU.

This hardware-accelerated software NGFW is a milestone in boosting software firewall performance and maximizing data center security coverage and efficiency by being first to market to be accelerated by a DPU.

The recently announced DPU-enabled Palo Alto Networks VM-Series NGFW uses zero trust network security principles. The DPU operates as an intelligent network filter to parse, classify and steer traffic flows with zero ReCPU overhead, which enables the NGFW to support close to 100Gb/s throughput for typical use cases. This is a 5x performance boost versus running the VM-Series firewall on a CPU alone - and up to 150 percent capex savings compared to legacy hardware.

As enterprises and telcos build cloud-like data centers, they need the agility and automation of the cloud without compromising performance. Together with NVIDIA, we are turbocharging our VM-Series virtual ML-powered NGFWs, said Muninder Singh Sambi, senior vice president of Products at Palo Alto Networks. The industry-leading NVIDIA BlueField DPU is ideal for cybersecurity solutions operating in cloud-like environments.

The first BlueField-enabled NGFW to market, the VM-Series enables application-aware segmentation, prevents malware, detects new threats and stops data exfiltration with the BlueField DPU offloading the host processor to accelerate packet filtering and forwarding functionality.

Intelligent Traffic Offload Service In certain customer environments, the majority of traffic either does not need inspection (for example, streaming traffic such as video, gaming and video conferencing) or can't be inspected, such as encrypted traffic for which the customer is unable to assign corresponding decryption policy on firewall. In such environments, Intelligent Traffic Offload will ensure that firewall resources are optimally utilized to inspect only those flows that benefit from continuous security inspection.

Up to 80 percent of network traffic, including media and encrypted data in a data center, doesn't need to be - or can't be - inspected by a firewall. To address this, the NVIDIA and Palo Alto Networks joint solution includes the Intelligent Traffic Offload (ITO) service, which examines network traffic to determine whether or not each session will benefit from security inspection.

The ITO service examines every session of the traffic to determine whether or not that session will benefit from security inspection. If the firewall determines that the session will not benefit from security inspection, ITO instructs the BlueField-2 DPU to forward all subsequent packets in that session directly to their destination without sending them to the firewall. (See the chart below.)

By only examining flows that can benefit from security inspection and offloading the rest to the DPU, the overall load on the firewall and the host CPU is reduced and performance increases without sacrificing security.

The ITO empowers enterprise, telco and cloud operators to protect end-users with an NGFW that can run on every host in a zero trust environment, helping expedite their digital transformation while keeping them safe from a myriad of cyberthreats.

Palo Alto Networks' integration with the NVIDIA BlueFIeld DPU allows the ITO service to intelligently offload traffic that does not benefit from further security inspection. Expanding Developer Ecosystem Around NVIDIA DOCA SDK Palo Alto Networks began development of the NGFW on the BlueField DPU by using the gRPC open source remote procedure call framework (a project of the Cloud Native Computing Foundation) and NVIDIA ASAP2, an open-source driven hardware acceleration framework.

The gRPC interface to BlueField and ASAP2 are now merged into the NVIDIA DOCA SDK, the data center infrastructure-on-a-chip architecture that gives developers an open platform for building software-defined, hardware-accelerated networking, storage, security and management applications running on BlueField DPUs.

DOCA is part of NVIDIA's commitment to building a broad developer community that revolutionizes data center infrastructure applications and services powered by NVIDIA GPUs and BlueField DPUs.

Learn more about the DOCA ecosystem and join our developer community.
LINK: https://blogs.nvidia.com/blog/2021/07/12/palo-alto-networks-cyber-defe...
See more stories from nvidia

Most recent headlines

13/03/2025

TAG Video Systems and Harmonic Partner to Deliver Enhanced Real-Time Monitoring for VOS360 Streaming Workflows at the 2025 NAB Show

TAG Video Systems and Harmonic Partner to Deliver Enhanced Real-Time Monitoring ...

13/03/2025

DigitalGlue Invites NAB Visitors to Experience New Features in Managed Storage Platform that Empowers Video Teams to Scale Effortlessly

DigitalGlue Invites NAB Visitors to Experience New Features in Managed Storage P...

13/03/2025

FOR-A America Theme - Connecting the Present, Building the Future - Comes to Life at NAB 2025 Exhibition

FOR-A America Theme - Connecting the Present, Building the Future - Comes to Lif...

13/03/2025

Ajit Pai Appointed President of CTIA

CTIA, the wireless industry association, has named former FCC Chairman Aji Pai as its President and Chief Executive Officer, effective April 1. He replaces Mere...

13/03/2025

NAB: FCC's 60 Minutes Investigation Is Unconstitutional, Invalid

he National Association of Broadcasters is urging the FCC to end its investigation of that controversial CBS interview with Kamala Harris stating there is no ...

13/03/2025

CBS Miami to Launch AR Coverage of Weather and Sports for March Madness

MIAMI CBS News & Stations continues to expand its use of augmented and virtual reality technologies with the planned launch of an augmented reality/virtual real...

13/03/2025

Meet the co-founder and chief customer success & innovation officer

Srividhya Srinivasan, co-founder and chief customer success & innovation Officer at Amagi, tells TVBEurope how staying ahead of the latest trends is essential f...

13/03/2025

FCC Chairman Carr Launches Massive Deregulation Initiative

WASHINGTON FCC Chairman Brendan Carr announced that the agency has launched a massive, new deregulatory initiative that could potentially subject virtually all ...

13/03/2025

SDVI Integrates Rally With Spectra Vail

SUNNYVALE, Calif. SDVI has announced that it has integrated its Rally media supply chain management platform with the Spectra Vail multi-cloud data management s...

13/03/2025

FCC Approves Gray's Acquisition of KXLT

ATLANTA Gray Media has announced that the Federal Communications Commission (FCC) has granted a waiver of its local ownership rules to permit Gray Media to acqu...

13/03/2025

NAB Show 2025 Exhibitor Insight: Blackmagic Design

TV Tech: What do you anticipate will be the most significant technology trends at the 2025 NAB Show?...

13/03/2025

Watch Student Naomi Soleils Folk Pop Performance on The Voice

Watch Student Naomi Soleils Folk Pop Performance on The Voice The songwriting major sang Stars by Grace Potter and the Nocturnals during the blind auditions. ...

13/03/2025

Italia 90 Republic of Ireland Squad, Riverdance, Cian Ducrot & B*Witched on Friday's Late Late Show

Here is your host, Patrick Kielty! Shake your Shamrocks, Patrick Kielty will be...

13/03/2025

RT Celebrating all things Irish this St. Patrick's Weekend

This St. Patrick's weekend, RT invites you to celebrate all things Irish, showcasing the very best of Irish sport, entertainment and live coverage from the...

13/03/2025

GTC 2025 - Announcements and Live Updates

What's next in AI is at GTC 2025. Not only the technology, but the people and ideas that are pushing AI forward - creating new opportunities, novel solution...

13/03/2025

T-Mobile, Thales and SIMPL ease IoT deployments with a flexible and secure connectivity solution

Facebook Twitter LinkedIn By combining T-Mobile's robust network, Thal...

13/03/2025

Relive the Magic as GeForce NOW Brings More Blizzard Gaming to the Cloud

Bundle up - GeForce NOW is bringing a flurry of Blizzard titles to its ever-expanding library. Prepare to weather epic gameplay in the cloud, tackling the genr...

13/03/2025

Gaming Goodness: NVIDIA Reveals Latest Neural Rendering and AI Advancements Supercharging Game Development at GDC 2025

AI is leveling up the world's most beloved games, as the latest advancements...

13/03/2025

Drop It Like It's Mod: Breathing New Life Into Classic Games With AI in NVIDIA RTX Remix

PC game modding is massive, with over 5 billion mods downloaded annually. Mods p...

12/03/2025

Como o Impacto Cultural e Financeiro da Indstria Musical Define Seu Sucesso em 2025

O Spotify acaba de lan ar o relat rio Loud & Clear deste ano, uma vis o transpar...

12/03/2025

Cmo el impacto cultural y financiero de la industria musical define su xito en 2025

Spotify acaba de presentar el informe Loud & Clear de este a o, una mirada trans...

12/03/2025

Nourish Mind, Body, and Soul This Ramadan With Spotify

Ramadan, a period of profound spiritual significance for Muslims worldwide, is a time for fasting, prayer, reflection, and community. Enrich your experience thi...

12/03/2025

How the Music Industry's Cultural and Financial Impact Define Its Success in 2025

Spotify has just unveiled this year's Loud & Clear report, a transparent loo...

12/03/2025

FAST now transcends back catalog content

More than 70% of FAST programming has been produced since 2010, according to new Gracenote report NEW YORK March 12, 2025 Gracenote, the content data busin...

12/03/2025

Viamedia Adopts ShowSeeker Pilot To Streamline Ad Workflows

GEONA, Nev. Independent digital and linear advertising rep firm Viamedia will adopt cloud-based ShowSeeker Pilot as its primary ad campaign and order management...

12/03/2025

Mediagenix Appoints Wael Yasin as Sales Director Central Europe

BRUSSELS Mediagenix has announced that Wael Yasin has joined the company as sales director Central Europe....

12/03/2025

Omdia: Global Online Consumer Expenditure to Hit $6.6 Trillion by 2029

LONDON A new study highlights opportunities for shoppable TV and the massive impact online consumer spending is having on the economy, with Omdia predicting tha...

12/03/2025

Comcast Technology Solutions Upgrades to Interra Systems BATON Version 9

CUPERTINO, Calif. Interra Systems has announced that Comcast Technology Solutions has integrated recent updates to BATON Version 9 into its operations....

12/03/2025

Nevion announces new 400G addition to its eMerge SDN media fabric offering

Nevion announces new 400G addition to its eMerge SDN media fabric offering Brie Clayton March 12, 2025 0 Comments High-capacity switch enhances existi...

12/03/2025

DaVinci Resolve Studio Delivers Cinematic Sound for Adam Bol

DaVinci Resolve Studio Delivers Cinematic Sound for Adam Bol Brie Clayton March 12, 2025 0 Comments Feature film relies on DaVinci Resolve Studio for ...

12/03/2025

SVT Leverages Ateliere Live to Pioneer 100% Software-Defined Production at Rally Sweden 2025

SVT Leverages Ateliere Live to Pioneer 100% Software-Defined Production at Rally...

12/03/2025

Berklee Awards Fenway Neighborhood Improvement Grant to Four Organizations

Berklee Awards Fenway Neighborhood Improvement Grant to Four Organizations A total of $17,000 will be distributed among the Boston-based nonprofits. By Madd...

12/03/2025

Offering a broad umbrella for IP standards

TVBEuropes Jenny Priestley sits down with new SMPTE president Richard Welsh to discuss his aims for the organisation going forward, its efforts to attract a you...

12/03/2025

Warner Bros Belgium takes a new approach to its post production workflows

The new process has significantly enhanced operational efficiencies, with automation freeing up creators to concentrate on higher value tasks By Matthew Corrig...

12/03/2025

Another VFX company suspends operations

Jellyfish Pictures, which has offices in London and Sheffield, said it has been battling hard in the face of strong headwinds over the last 12 months By Jenny ...

12/03/2025

Bitcentral to Showcase AI-Powered Innovations for Smarter...

Visit Booth #W2213 to Experience the Latest in AI-Driven Content Discovery and Workflow Automation Bitcentral, a leader in media workflow solutions, is set to ...

12/03/2025

Jeff Lilly Named WGN-TV Director Of Technology

CHICAGO Jeff Lilly has been named WGN-TV director of technology effective March 17, 2025, according to Ric Harris, WGN-TV vice president and general manager....

12/03/2025

Survey: Consumers Want More Shoppable TV Experiences

MOUNTAIN VIEW, Calif. A new study from LG Ad Solutions indicates that consumers want more features that would allow them to shop for products on the connected T...

12/03/2025

IP Showcase To Focus On IP, Broadcast Tech Convergence at 2025 NAB Show

BOTHELL, Wash. The Alliance for IP Media Solutions (AIMS), Advanced Media Workflow Association (AMWA) and the Video Services Forum (VSF) will once again present...

12/03/2025

Comcast Boosts Internet Speeds for More Than 20 Million Customers

PHILADELPHIA Comcast announced that it has upgraded Xfinity Internet speeds for more than 20 million customers for no additional cost....

12/03/2025

Create with Maxon: Cinema 4D Fundamentals Workshop - March 12-14

Create with Maxon: Cinema 4D Fundamentals Workshop - March 12-14 Brie Clayton March 11, 2025 0 Comments Makin' Waffles with Elly Wade During Marc...

12/03/2025

Ross Video Strengthens Cloud Leadership with Appointment of Aaron Tunnell

Ottawa, Canada - March 12, 2025 - Ross Video is pleased to announce the appointment of Aaron Tunnell as Business Development Director, Cloud Solutions, reinforc...

12/03/2025

VEON to release 4Q 2024 trading update on 20 March 2025

12 Mar 2025 VEON to release 4Q 2024 trading update on 20 March 2025 Dubai, 12 March 2025 - VEON Ltd. (NASDAQ: VEON), a global digital operator, today confirms ...

12/03/2025

Getting Set for the Winter Olympics: Inside SVT's Ongoing Software-Based Production Evolution

Getting set for the Winter Olympics: Inside SVT's ongoing software-based pro...

12/03/2025

Seamless SMPTE 2110: A Discussion on Making the Move to IP Less Painful

Seamless SMPTE 2110: A Discussion on Making the Move to IP Less Painful Leaders from Netflix, Monumental Sports & Entertainment, LinkedI, and Megapixel address ...

12/03/2025

Opening Doors of Perception: Meta's Ajit Ninan on Rethinking AR/MR Perceptual Displays

Opening Doors of Perception: Meta's Ajit Ninan on Rethinking AR/MR Perceptua...

12/03/2025

Sky Sports Unveils Exciting Plans for 2025 Formula 1 Coverage

With the 2025 Formula 1 season set to begin in Melbourne on March 16, Sky Sports is gearing up to deliver its most comprehensive F1 coverage yet. Following a th...

12/03/2025

Unicanal and Trece TV revolutionize Digital TV in Paraguay with Rohde & Schwarz transmission solutions

Unicanal and Trece TV revolutionize Digital TV in Paraguay with Rohde & Schwarz ...

12/03/2025

Honoring Service, Celebrating Sport: Rohde & Schwarz UK Sponsors NavyFit Rugby Double-Header

Honoring Service, Celebrating Sport: Rohde & Schwarz UK Sponsors NavyFit Rugby D...