Palo Alto Networks VM-Series firewall now available on NetScaler SDX Platform

1. PALO ALTO NETWORKS: Technology Partner Solution Brief
VM-Series for Citrix NetScaler SDX
SOLUTION OVERVIEW
The Palo Alto Networks Technology
®
Partner Program includes a select
group of partners that deliver solutions
or products that interoperate with the
next-generation firewall.
HIGHLIGHTS
Easy deployment of next-generation security to safely
enable applications, and protect against known and
unknown threats.
n
n
n
Minimize turn up times, and flexibly add capacity to
accommodate the security and application delivery
controller needs of new applications or new tenants
(business units, application owners, service provider
customers)
Deploy dedicated ADC and security capabilities for
applications or tenants.
Business productivity hinges on providing the right users
secure access to the right applications using any device
and from any location. Effective and seamless delivery of
applications requires addressing all aspects of application
delivery—security, availability, performance and visibility—in
a comprehensive manner. Each capability needs to be bestin-class, and the aggregate solution needs to exhibit the
qualities and characteristics that define cloud architectures,
including affordability, and elastic scalability.
Citrix NetScaler SDX is a true service delivery networking platform for enterprise
and cloud datacenters. An advanced virtualized architecture supports multiple
NetScaler instances on a single hardware appliance, while an advanced control
plane unifies provisioning, monitoring and management to meet the most demanding
multi-tenant requirements. Instead of relying on “bolted” on capabilities or a
collection of physical and virtual form factors that may compromise on features,
performance and scalability, organizations can utilize the Citrix NetScaler SDX
purpose-built platform for their datacenter service delivery needs.
Now, with the addition of the VM-Series on Citrix NetScaler SDX, security
and ADC services can be consolidated on a single hardware platform. This
addresses the unique application needs for business units, application owners
and SP customers in a multi-tenant deployment. The combination of VM-Series
on Citrix NetScaler SDX also provides a complete, validated, security and ADC
solution for Citrix XenApp and XenDesktop deployments.
VM-Series on Citrix NetScaler SDX
The VM-Series delivers safe application enablement using the same PAN-OS™
feature set that is available in physical security appliances. The core of the
Citrix NetScaler SDX Platform
VM-Series is the next-generation firewall which natively classifies all traffic,
inclusive of applications, threats and content, then ties that traffic to the user,
regardless of location or device type. The application, content, and user—in
other words, the elements that run the business—are then used as the basis of an
organization’s security policies, resulting in an improved security posture and a
reduction in incident response time.
SVM
ADC
VMSERIES
ADC
VMSERIES
ADC
Hypervisor
Citrix NetScaler SDX
VM-Series on Citrix NetScaler SDX
VMSERIES

2. PALO ALTO NETWORKS: Technology Partner Solution Brief
The VM-Series is based on a Single Pass software architecture to minimize latency. Operations such as application identification and decoding
and signature matching for all threats and content, networking functions, and policy lookup, are executed once to optimize performance.
The management and data plane are separated, with dedicated CPUs assigned to each plane to ensure that management access is always available,
irrespective of traffic loads.
By integrating the VM-Series on the Citrix NetScaler SDX platform, organizations can provide best-in-class ADC and security capabilities
on an integrated, purpose-built platform to address the following use cases:
Multi-Tenant Cloud Delivery
In a cloud delivery model, each “tenant”—business unit,
application owner or service provider customer—may have
unique, independent security and ADC needs. VM-Series on Citrix
NetScaler SDX can provide dedicated instances of security and
ADC, and per application load balancing with dedicated firewalling.
With the combined solution, organizations can achieve substantial
infrastructure consolidation, reducing costs and complexity
without compromising on functionality. Mutual support for an
open XML API further facilitates the transformation to a cloud
delivery model by enabling real-time orchestration of individual
technologies and capabilities in response to changing conditions.
Firewall
e a
Citrix NetScaler
with VM-Series
ADC
Tenant 1
Tenant 2
Tenant 3
Multi-Tenant Cloud Deployments: Addressing multi-tenant needs of business
units, application owners, and service provider customers.
Consolidated Security and Availability for XenApp XenDesktop Deployments
Substantial benefits can be realized by embracing desktop virtualization, from reducing cost of operations and desktop ownership to enabling
greater business agility. Fully realizing these gains, however, depends on ensuring 100 percent uptime, providing adequate protection against threats
and safely enabling appropriate access to applications for virtual desktop users.
The combination of VM-Series on Citrix NetScaler SDX
delivers consolidated security and availability for Citrix Xen
App XenDesktop. This includes:
On-premise applications
• Secure remote access for virtual desktop users
operating remotely
• Zero Trust segmentation of the virtual desktop
infrastructure and resources in
the datacenter
• Local and global load balancing to ensure
availability of virtual desktop infrastructure and
applications
Any User
Any Device
Anywhere
Internet applications
ADC
XenApp/XenDesktop
(VDI Environment)
VMSERIES
ADC
VMSERIES
Hypervisor
Citrix NetScaler SDX
Citrix Receiver
• Safe application enablement for virtual desktop
users on an individual or user-group basis to
appropriate applications on the backend
Citrix NetScaler SDX
with VM-Series
Consolidated Security and Availability for Citrix XenApp XenDesktop
• Distributed denial-of-service (DDos) and advanced protection against known and unknown threats
Summary
The Palo Alto Networks VM-Series on Citrix NetScaler SDX provides enterprises with a powerful, best-in-class solution for secure application
delivery. The full partitioning of application sets simplifies and reduces costs for application provisioning, maintenance and de-provisioning.
The combined solution enables the secure delivery of all types of applications to all users in all locations while ensuring the highest levels of
performance, security, availability, visibility and flexibility.
4401 Great America Parkway
Santa Clara, CA 95054
Main: +1.408.753.4000
Sales:
+1.866.320.4788
Support: +1.866.898.9087
www.paloaltonetworks.com
Copyright ©2014, Palo Alto Networks, Inc. All rights reserved. Palo Alto Networks,
the Palo Alto Networks Logo, PAN-OS, App-ID and Panorama are trademarks of
Palo Alto Networks, Inc. All specifications are subject to change without notice.
Palo Alto Networks assumes no responsibility for any inaccuracies in this document
or for any obligation to update information in this document. Palo Alto Networks
reserves the right to change, modify, transfer, or otherwise revise this publication
without notice. PAN_TPSB_CNS-SDX_123013