[](https://www.paloaltonetworks.com/?ts=markdown)

* CN
  
  * [USA (ENGLISH)](https://www.paloaltonetworks.com/)
  * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au)
  * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br)
  * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca)
  * CHINA (简体中文)
  * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr)
  * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de)
  * [INDIA (ENGLISH)](https://www.paloaltonetworks.in)
  * [ITALY (ITALIANO)](https://www.paloaltonetworks.it)
  * [JAPAN (日本語)](https://www.paloaltonetworks.jp)
  * [KOREA (한국어)](https://www.paloaltonetworks.co.kr)
  * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat)
  * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx)
  * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg)
  * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es)
  * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw)
  * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk)

* ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [联系我们](https://www.paloaltonetworks.cn/contact?ts=markdown)

* [资源](https://www.paloaltonetworks.cn/resources?ts=markdown)

* [获得支持](https://support.paloaltonetworks.com/support)

* [遭遇攻击？](https://start.paloaltonetworks.com/contact-unit42.html)
  ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Palo Alto Networks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)](https://www.paloaltonetworks.com/?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/?ts=markdown)

* 产品  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 产品  
  [人工智能驱动的网络安全平台](https://www.paloaltonetworks.cn/network-security?ts=markdown)
  
  * [Secure AI by Design](https://www.paloaltonetworks.cn/precision-ai-security/secure-ai-by-design?ts=markdown)
  
  * [Prisma AIRS](https://www.paloaltonetworks.cn/prisma/prisma-ai-runtime-security?ts=markdown)
  
  * [AI Access Security](https://www.paloaltonetworks.cn/sase/ai-access-security?ts=markdown)
  
  * [云交付的安全服务](https://www.paloaltonetworks.cn/network-security/security-subscriptions?ts=markdown)
  
  * [高级威胁预防](https://www.paloaltonetworks.cn/network-security/advanced-threat-prevention?ts=markdown)
  
  * [Advanced URL Filtering](https://www.paloaltonetworks.cn/network-security/advanced-url-filtering?ts=markdown)
  
  * [Advanced WildFire](https://www.paloaltonetworks.cn/network-security/advanced-wildfire?ts=markdown)
  
  * [Advanced DNS Security](https://www.paloaltonetworks.cn/network-security/advanced-dns-security?ts=markdown)
  
  * [企业数据丢失防护](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)
  
  * [Enterprise IoT Security](https://www.paloaltonetworks.cn/network-security/enterprise-device-security?ts=markdown)
  
  * [医疗物联网安全](https://www.paloaltonetworks.cn/network-security/medical-iot-security?ts=markdown)
  
  * [工业 OT 安全](https://www.paloaltonetworks.cn/network-security/industrial-ot-security?ts=markdown)
  
  * [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)
  
  * [新一代防火墙](https://www.paloaltonetworks.cn/network-security/next-generation-firewall?ts=markdown)
  
  * [硬件防火墙](https://www.paloaltonetworks.cn/network-security/hardware-firewall-innovations?ts=markdown)
  
  * [软件防火墙](https://www.paloaltonetworks.cn/network-security/software-firewalls?ts=markdown)
  
  * [Strata Cloud Manager](https://www.paloaltonetworks.cn/network-security/strata-cloud-manager?ts=markdown)
  
  * [SD-WAN for NGFW](https://www.paloaltonetworks.cn/network-security/sd-wan-subscription?ts=markdown)
  
  * [PAN-OS](https://www.paloaltonetworks.cn/network-security/pan-os?ts=markdown)
  
  * [Panorama](https://www.paloaltonetworks.cn/network-security/panorama?ts=markdown)
  
  * [Secure Access Service Edge](https://www.paloaltonetworks.cn/sase?ts=markdown)
  
  * [Prisma SASE](https://www.paloaltonetworks.cn/sase?ts=markdown)
  
  * [应用加速](https://www.paloaltonetworks.cn/sase/app-acceleration?ts=markdown)
  
  * [自主数字体验管理](https://www.paloaltonetworks.cn/sase/adem?ts=markdown)
  
  * [企业 DLP](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)
  
  * [Prisma Access](https://www.paloaltonetworks.cn/sase/access?ts=markdown)
  
  * [Prisma 浏览器](https://www.paloaltonetworks.cn/sase/prisma-browser?ts=markdown)
  
  * [Prisma SD-WAN](https://www.paloaltonetworks.cn/sase/sd-wan?ts=markdown)
  
  * [远程浏览器隔离](https://www.paloaltonetworks.cn/sase/remote-browser-isolation?ts=markdown)
  
  * [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)  
    [基于 AI 的安全运营平台](https://www.paloaltonetworks.cn/cortex?ts=markdown)
  
  * [Cloud Security](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)
  
  * [Cortex Cloud](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)
  
  * [应用安全](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown)
  
  * [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown)
  
  * [云运行时安全](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown)
  
  * [Prisma Cloud](https://www.paloaltonetworks.cn/prisma/cloud?ts=markdown)
  
  * [Unit 42 托管检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown)
  
  * [人工智能驱动的 SOC](https://www.paloaltonetworks.cn/cortex?ts=markdown)
  
  * [Cortex Advanced Email Security](https://www.paloaltonetworks.cn/cortex/advanced-email-security?ts=markdown)
  
  * [Cortex Exposure Management](https://www.paloaltonetworks.cn/cortex/exposure-management?ts=markdown)
  
  * [Cortex XSIAM](https://www.paloaltonetworks.cn/cortex/cortex-xsiam?ts=markdown)
  
  * [Cortex XDR](https://www.paloaltonetworks.cn/cortex/cortex-xdr?ts=markdown)
  
  * [Cortex XSOAR](https://www.paloaltonetworks.cn/cortex/cortex-xsoar?ts=markdown)
  
  * [Cortex Xpanse](https://www.paloaltonetworks.cn/cortex/cortex-xpanse?ts=markdown)
  
  * [托管 XSIAM](https://www.paloaltonetworks.cn/cortex/managed-xsiam?ts=markdown)

* 解决方案  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 解决方案  
  AI 安全
  
  * [安全的人工智能生态系统](https://www.paloaltonetworks.cn/prisma/prisma-ai-runtime-security?ts=markdown)
  * [安全使用 GenAI](https://www.paloaltonetworks.cn/sase/ai-access-security?ts=markdown)  
    网络安全
  * [云网络安全](https://www.paloaltonetworks.cn/network-security/software-firewalls?ts=markdown)
  * [数据中心安全](https://www.paloaltonetworks.cn/network-security/data-center?ts=markdown)
  * [DNS Security](https://www.paloaltonetworks.cn/network-security/advanced-dns-security?ts=markdown)
  * [入侵检测和防御](https://www.paloaltonetworks.cn/network-security/advanced-threat-prevention?ts=markdown)
  * [IoT Security](https://www.paloaltonetworks.cn/network-security/enterprise-device-security?ts=markdown)
  * [5G 安全](https://www.paloaltonetworks.cn/network-security/5g-security?ts=markdown)
  * [确保所有应用、用户和位置的安全](https://www.paloaltonetworks.cn/sase/secure-users-data-apps-devices?ts=markdown)
  * [确保分支机构转型的安全](https://www.paloaltonetworks.cn/sase/secure-branch-transformation?ts=markdown)
  * [确保任何设备上的工作安全](https://www.paloaltonetworks.cn/sase/secure-work-on-any-device?ts=markdown)
  * [VPN 替代](https://www.paloaltonetworks.cn/sase/vpn-replacement-for-secure-remote-access?ts=markdown)
  * [Web 和网络钓鱼安全](https://www.paloaltonetworks.cn/network-security/advanced-url-filtering?ts=markdown)  
    云安全
  * [应用安全态势管理 (ASPM)](https://www.paloaltonetworks.cn/cortex/cloud/application-security-posture-management?ts=markdown)
  * [软件供应链安全](https://www.paloaltonetworks.cn/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [代码安全](https://www.paloaltonetworks.cn/cortex/cloud/code-security?ts=markdown)
  * [云安全态势管理 (CSPM)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [云基础架构权限管理 (CIEM)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [数据安全态势管理 (DSPM)](https://www.paloaltonetworks.cn/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI 安全态势管理 (AI-SPM)](https://www.paloaltonetworks.cn/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [云检测与响应 (CDR)](https://www.paloaltonetworks.cn/cortex/cloud-detection-and-response?ts=markdown)
  * [云工作负载保护 (CWP)](https://www.paloaltonetworks.cn/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [Web 应用及 API 安全 (WAAS)](https://www.paloaltonetworks.cn/cortex/cloud/web-app-api-security?ts=markdown)  
    安全运营
  * [云检测和响应](https://www.paloaltonetworks.cn/cortex/cloud-detection-and-response?ts=markdown)
  * [网络安全自动化](https://www.paloaltonetworks.cn/cortex/network-security-automation?ts=markdown)
  * [事件案例管理](https://www.paloaltonetworks.cn/cortex/incident-case-management?ts=markdown)
  * [SOC 自动化](https://www.paloaltonetworks.cn/cortex/security-operations-automation?ts=markdown)
  * [威胁情报管理](https://www.paloaltonetworks.cn/cortex/threat-intel-management?ts=markdown)
  * [托管的检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown)
  * [攻击面管理](https://www.paloaltonetworks.cn/cortex/cortex-xpanse/attack-surface-management?ts=markdown)
  * [合规性管理](https://www.paloaltonetworks.cn/cortex/cortex-xpanse/compliance-management?ts=markdown)
  * [互联网运营管理](https://www.paloaltonetworks.cn/cortex/cortex-xpanse/internet-operations-management?ts=markdown)  
    端点安全
  * [端点防护](https://www.paloaltonetworks.cn/cortex/endpoint-protection?ts=markdown)
  * [扩展的检测和响应](https://www.paloaltonetworks.cn/cortex/detection-and-response?ts=markdown)
  * [勒索软件防护](https://www.paloaltonetworks.cn/cortex/ransomware-protection?ts=markdown)
  * [数字取证](https://www.paloaltonetworks.cn/cortex/digital-forensics?ts=markdown)  
    [行业](https://www.paloaltonetworks.cn/industry?ts=markdown)
  * [公共部门](https://www.paloaltonetworks.com/industry/public-sector)
  * [金融服务](https://www.paloaltonetworks.com/industry/financial-services)
  * [制造](https://www.paloaltonetworks.com/industry/manufacturing)
  * [医疗保健](https://www.paloaltonetworks.com/industry/healthcare)
  * [中小型企业解决方案](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio)

* 服务  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 服务  
  [威胁情报和事件响应服务](https://www.paloaltonetworks.cn/unit42?ts=markdown)
  
  * [评估](https://www.paloaltonetworks.cn/unit42/assess?ts=markdown)
  
  * [AI 安全评估](https://www.paloaltonetworks.cn/unit42/assess/ai-security-assessment?ts=markdown)
  
  * [攻击面评估](https://www.paloaltonetworks.cn/unit42/assess/attack-surface-assessment?ts=markdown)
  
  * [防泄露准备工作审核](https://www.paloaltonetworks.cn/unit42/assess/breach-readiness-review?ts=markdown)
  
  * [BEC 准备情况评估](https://www.paloaltonetworks.com/bec-readiness-assessment)
  
  * [云安全评估](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment)
  
  * [入侵评估](https://www.paloaltonetworks.cn/unit42/assess/compromise-assessment?ts=markdown)
  
  * [网络风险评估](https://www.paloaltonetworks.cn/unit42/assess/cyber-risk-assessment?ts=markdown)
  
  * [并购网络尽职调查](https://www.paloaltonetworks.cn/unit42/assess/mergers-acquisitions-cyber-due-dilligence?ts=markdown)
  
  * [渗透测试](https://www.paloaltonetworks.cn/unit42/assess/penetration-testing?ts=markdown)
  
  * [紫队演习](https://www.paloaltonetworks.cn/unit42/assess/purple-teaming?ts=markdown)
  
  * [勒索软件就绪评估](https://www.paloaltonetworks.cn/unit42/assess/ransomware-readiness-assessment?ts=markdown)
  
  * [SOC 评估](https://www.paloaltonetworks.com/unit42/assess/soc-assessment)
  
  * [供应链风险评估](https://www.paloaltonetworks.cn/unit42/assess/supply-chain-risk-assessment?ts=markdown)
  
  * [桌面演习](https://www.paloaltonetworks.cn/unit42/assess/tabletop-exercise?ts=markdown)
  
  * [Unit 42 顾问人员](https://www.paloaltonetworks.cn/unit42/retainer?ts=markdown)
  
  * [响应](https://www.paloaltonetworks.cn/unit42/respond?ts=markdown)
  
  * [云事故响应](https://www.paloaltonetworks.cn/unit42/respond/cloud-incident-response?ts=markdown)
  
  * [数字取证](https://www.paloaltonetworks.cn/unit42/respond/digital-forensics?ts=markdown)
  
  * [事件响应](https://www.paloaltonetworks.cn/unit42/respond/incident-response?ts=markdown)
  
  * [托管检测与响应](https://www.paloaltonetworks.cn/unit42/respond/managed-detection-response?ts=markdown)
  
  * [托管威胁追踪](https://www.paloaltonetworks.cn/unit42/respond/managed-threat-hunting?ts=markdown)
  
  * [托管 XSIAM](https://www.paloaltonetworks.cn/cortex/managed-xsiam?ts=markdown)
  
  * [Unit 42 顾问人员](https://www.paloaltonetworks.cn/unit42/retainer?ts=markdown)
  
  * [转型](https://www.paloaltonetworks.cn/unit42/transform?ts=markdown)
  
  * [事故响应计划制定与审核](https://www.paloaltonetworks.cn/unit42/transform/incident-response-plan-development-review?ts=markdown)
  
  * [安全计划设计](https://www.paloaltonetworks.cn/unit42/transform/security-program-design?ts=markdown)
  
  * [虚拟 CISO](https://www.paloaltonetworks.cn/unit42/transform/vciso?ts=markdown)
  
  * [零信任咨询](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory)  
    [全球客户服务](https://www.paloaltonetworks.cn/services?ts=markdown)
  
  * [教育与培训](https://www.paloaltonetworks.com/services/education)
  
  * [专业服务](https://www.paloaltonetworks.com/services/consulting)
  
  * [成功工具](https://www.paloaltonetworks.com/services/customer-success-tools)
  
  * [支持服务](https://www.paloaltonetworks.com/services/solution-assurance)
  
  * [客户成功](https://www.paloaltonetworks.com/services/customer-success)  
    [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg)  
    Unit 42 顾问人员
    为满足企业的需求而定制，您可以选择将顾问人员工时数分配给我们的任意产品，包括主动网络风险管理服务。了解如何一键呼叫世界一流的 Unit 42 事故响应团队。
    了解更多](https://www.paloaltonetworks.cn/unit42/retainer?ts=markdown)

* 合作伙伴  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 合作伙伴  
  NextWave 合作伙伴
  
  * [NextWave 合作伙伴社区](https://www.paloaltonetworks.com/partners)
  * [云服务提供商](https://www.paloaltonetworks.com/partners/nextwave-for-csp)
  * [全球系统集成商](https://www.paloaltonetworks.com/partners/nextwave-for-gsi)
  * [技术合作伙伴](https://www.paloaltonetworks.com/partners/technology-partners)
  * [服务提供商](https://www.paloaltonetworks.com/partners/service-providers)
  * [解决方案提供商](https://www.paloaltonetworks.com/partners/nextwave-solution-providers)
  * [托管安全服务提供商](https://www.paloaltonetworks.com/partners/managed-security-service-providers)  
    采取行动
  * [门户网站登录](https://www.paloaltonetworks.com/partners/nextwave-partner-portal)
  * [管理的服务计划](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program)
  * [成为合作伙伴](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner)
  * [请求访问](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess)
  * [查找合作伙伴](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator)  
    [CYBERFORCE
    CYBERFORCE 代表了因其安全专业知识而值得信赖的前 1% 的合作伙伴工程师。
    了解更多](https://www.paloaltonetworks.com/cyberforce)

* 公司  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 公司  
  Palo Alto Networks
  
  * [关于我们](https://www.paloaltonetworks.cn/about-us?ts=markdown)
  * [管理团队](https://www.paloaltonetworks.com/about-us/management)
  * [投资者关系](https://investors.paloaltonetworks.com/)
  * [地点](https://www.paloaltonetworks.com/about-us/locations)
  * [道德与合规性](https://www.paloaltonetworks.com/company/ethics-and-compliance)
  * [企业责任](https://www.paloaltonetworks.com/about-us/corporate-responsibility)
  * [军人和退伍军人](https://jobs.paloaltonetworks.com/military)  
    [为什么选择 Palo Alto Networks？](https://www.paloaltonetworks.cn/why-paloaltonetworks?ts=markdown)
  * [Precision AI 安全](https://www.paloaltonetworks.cn/precision-ai-security?ts=markdown)
  * [我们的平台方法](https://www.paloaltonetworks.cn/why-paloaltonetworks/platformization?ts=markdown)
  * [加速网络安全转型](https://www.paloaltonetworks.com/why-paloaltonetworks/nam-cxo-portfolio)
  * [获得的奖项与表彰](https://www.paloaltonetworks.com/about-us/awards)
  * [客户案例](https://www.paloaltonetworks.cn/customers?ts=markdown)
  * [全球认证](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance)
  * [全方位信任计划](https://www.paloaltonetworks.com/resources/whitepapers/trust-360)  
    职业生涯
  * [概述](https://jobs.paloaltonetworks.com/)
  * [文化与福利](https://jobs.paloaltonetworks.com/culture)  
    [《新闻周刊》评选出的最受欢迎的工作场所
    善待员工的企业
    阅读更多](https://www.paloaltonetworks.com/company/press/2021/palo-alto-networks-secures-top-ranking-on-newsweek-s-most-loved-workplaces-list-for-2021)

* 更多内容  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) 更多内容  
  资源
  
  * [博客](https://www.paloaltonetworks.com/blog/?lang=zh-hans)
  * [Unit 42 威胁研究博客](https://unit42.paloaltonetworks.com/)
  * [社区](https://www.paloaltonetworks.com/communities)
  * [内容库](https://www.paloaltonetworks.cn/resources?ts=markdown)
  * [Cyberpedia](https://www.paloaltonetworks.cn/cyberpedia?ts=markdown)
  * [技术内幕](https://techinsider.paloaltonetworks.com/)
  * [知识库](https://knowledgebase.paloaltonetworks.com/)
  * [Palo Alto Networks 频道](https://tv.paloaltonetworks.com/)
  * [领导者的视角](https://www.paloaltonetworks.com/perspectives/)
  * [《网络视角》杂志](https://www.paloaltonetworks.com/cybersecurity-perspectives/cyber-perspectives-magazine)
  * [区域云位置](https://www.paloaltonetworks.cn/products/regional-cloud-locations?ts=markdown)
  * [技术文档](https://docs.paloaltonetworks.com/)
  * [安全态势评估](https://www.paloaltonetworks.cn/security-posture-assessment?ts=markdown)
  * [威胁载体播客](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/)  
    联系
  * [在线社区](https://live.paloaltonetworks.com/)
  * [活动资讯](https://events.paloaltonetworks.com/)
  * [高管简报中心](https://www.paloaltonetworks.com/about-us/executive-briefing-program)
  * [演示](https://www.paloaltonetworks.cn/demos?ts=markdown)
  * [联系我们](https://www.paloaltonetworks.cn/company/contact-sales?ts=markdown)  
    [博客
    了解行业趋势和全球最大网络安全公司的最新创新
    了解更多](https://www.paloaltonetworks.com/blog/?lang=zh-hans)

* CN  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Language
  
  * [USA (ENGLISH)](https://www.paloaltonetworks.com/)
  * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au)
  * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br)
  * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca)
  * CHINA (简体中文)
  * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr)
  * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de)
  * [INDIA (ENGLISH)](https://www.paloaltonetworks.in)
  * [ITALY (ITALIANO)](https://www.paloaltonetworks.it)
  * [JAPAN (日本語)](https://www.paloaltonetworks.jp)
  * [KOREA (한국어)](https://www.paloaltonetworks.co.kr)
  * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat)
  * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx)
  * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg)
  * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es)
  * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw)
  * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk)

* [联系我们](https://www.paloaltonetworks.cn/contact?ts=markdown)

* [资源](https://www.paloaltonetworks.cn/resources?ts=markdown)

* [获得支持](https://support.paloaltonetworks.com/support)

* [遭遇攻击？](https://start.paloaltonetworks.com/contact-unit42.html)

* [立即开始](https://www.paloaltonetworks.cn/get-started?ts=markdown)  
  搜索  
  Close search modal
  [](https://www.paloaltonetworks.com/?ts=markdown)

1. [Cyberpedia](https://www.paloaltonetworks.cn/cyberpedia?ts=markdown)
2. [Securing Your Kubernetes Cluster: Kubernetes Best Practices and Strategies](https://www.paloaltonetworks.cn/cyberpedia/kubernetes-cluster-security?ts=markdown)  
   Table of Contents

* [What Is the Importance of a Secure Kubernetes Cluster?](#importance)
* [Understanding Kubernetes Security](#security)
* [What Are Kubernetes Security Considerations and Security Best Practices?](#practices)
* [What Are Advanced Strategies for Kubernetes Security?](#advanced)
* [Kubernetes Cluster Security FAQs](#faqs)

# Securing Your Kubernetes Cluster: Kubernetes Best Practices and Strategies

Table of Contents

* [What Is the Importance of a Secure Kubernetes Cluster?](#importance)
* [Understanding Kubernetes Security](#security)
* [What Are Kubernetes Security Considerations and Security Best Practices?](#practices)
* [What Are Advanced Strategies for Kubernetes Security?](#advanced)
* [Kubernetes Cluster Security FAQs](#faqs)

1. What Is the Importance of a Secure Kubernetes Cluster?

* [1. What Is the Importance of a Secure Kubernetes Cluster?](#importance)
* [2. Understanding Kubernetes Security](#security)
* [3. What Are Kubernetes Security Considerations and Security Best Practices?](#practices)
* [4. What Are Advanced Strategies for Kubernetes Security?](#advanced)
* [5. Kubernetes Cluster Security FAQs](#faqs)

Kubernetes is an open-source [container orchestration](https://www.paloaltonetworks.com/cyberpedia/what-is-container-security?ts=markdown) platform. It provides capabilities to automate container deployment, scaling, and operation across a cluster base in a Kubernetes environment. The Kubernetes framework is used for running distributed systems resiliently, allowing for scaling and failover for applications to ensure high availability. As a vital tool in the cloud-native ecosystem, [Kubernetes](https://www.paloaltonetworks.com/cyberpedia/what-is-kubernetes?ts=markdown) simplifies container management and orchestration. Given the open and dynamic nature of Kubernetes deployments, security is paramount to protect sensitive data, maintain application integrity, and ensure operational continuity.

## What Is the Importance of a Secure Kubernetes Cluster?

A secure Kubernetes cluster is vital for several reasons. It protects a Kubernetes cluster from unauthorized access, which prevents data breaches and exposure of sensitive data. It also safeguards applications, keeping them from being compromised, such as altering application code or injecting malicious software.

Kubernetes security also helps maintain the availability of a Kubernetes cluster. Cyberattacks, such as ransomware or distributed denial of service (DDoS) attacks, can render a Kubernetes cluster unavailable to users. The resulting application downtime or failure can lead to significant business disruption, lost productivity, and financial losses, especially if the Kubernetes cluster is running critical applications.

A secure Kubernetes environment is also crucial to meet regulatory compliance requirements. Most organizations are subject to government and industry laws and regulations that have specific levels of data protection and security. If a Kubernetes cluster is not secure, it may cause regulatory compliance violations that can lead to penalties and damage to the organization's reputation.

### Five Reasons Securing a Kubernetes Cluster Is Essential

**1. Increased Costs**  
Recovering from security incidents caused by a Kubernetes cluster compromise can be costly. These usually involve extensive incident response efforts, legal fees, potential fines for regulatory noncompliance, and increased insurance premiums.

**2. Network Exposure**  
Misconfigured Kubernetes [network policies](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-network-security?ts=markdown) can expose internal services to the public internet. This makes them accessible to attackers.

**3. Compromised Customer Trust**  
A Kubernetes security incident that results in [data breaches](https://www.paloaltonetworks.com/cyberpedia/data-breach?ts=markdown) and service disruptions can erode customer trust, which is difficult and costly to rebuild. It is not uncommon for customers to move their business to competitors, resulting in long-term financial impact and reputational damage.

**4. Resource Hijacking**  
Attackers can exploit an insecure Kubernetes cluster to deploy their [containers](https://www.paloaltonetworks.com/cyberpedia/what-is-a-container?ts=markdown). This involves them using the Kubernetes cluster's computing resources for illicit purposes, such as launching additional attacks.

**5. Supply Chain Security**  
A Kubernetes ecosystem is dependent on a complex supply chain of container images, worker nodes, image registries, code, and dependencies. Insecure Kubernetes cluster configurations can lead to the exploitation of vulnerabilities, compromising the integrity of the deployment pipeline and the applications.

## Understanding Kubernetes Security

Kubernetes is widely considered the de facto orchestration system for managing [containerized](https://www.paloaltonetworks.com/cyberpedia/containerization?ts=markdown) applications in [cloud-native](https://www.paloaltonetworks.com/cyberpedia/what-is-cloud-native?ts=markdown) environments. But a Kubernetes cluster introduces unique security risks that stem from its architecture, operational complexity, and the dynamic nature of the processes used to containerize applications.

### What Security Vulnerabilities Does a Kubernete Native Environment Present?

#### Authentication and Authorization

Kubernetes supports multiple authentication mechanisms (e.g., tokens, certificates, basic auth, and anonymous auth). Managing these, along with appropriate authorization privileges through role-based access control (RBAC), can be complex and result in oversights that could expose the Kubernetes cluster.

#### Misconfigurations

Kubernetes operates on a declarative model, meaning the desired state is defined, and Kubernetes works to maintain that state. While this feature simplifies management, it can also lead to Kubernetes security risks if configurations are incorrect or insecure. In a security context, misconfigurations can expose service accounts. These are used to provide an identity for processes that run in a pod, allowing those processes to interact with the Kubernetes API. This can result in unauthorized access to sensitive information and the service mesh or even enable attackers to take control of the Kubernetes cluster.

#### Logging and Monitoring

A Kubernetes cluster generates logs at various levels with data coming from sources, such as a kubelet running on a pod. Carefully monitoring these log files and providing up to date reporting is critical, as not doing so could result in a failure to detect suspicious activities and potential breaches.

#### Pod to Pod Contamination

Because Kubernetes is based on a multitenant architecture, different applications, possibly owned by different entities, can share the same Kubernetes cluster. This can increase the risk of cross-contamination between pods in the event that one tenant's workloads are compromised if proper isolation between tenants has not been implemented.

#### Compromised Containers

Compromised containers can result when they're built from insecure container images or ones containing vulnerabilities. This puts the security of the entire cluster at risk. Vulnerable or malicious containers can serve as entry points for attackers to infiltrate Kubernetes clusters. Once inside, attackers can execute code, steal data, or move laterally within the cluster.

#### Fast-Paced Container Lifecycle

Containers in Kubernetes are often ephemeral, meaning they can be created and destroyed quickly. This can complicate traditional security measures such as intrusion detection and incident response, which may not be able to keep up with the fast-paced lifecycle of containers.

#### Kubernetes APIs

Kubernetes provides a rich set of APIs out of the box to allow users to interact with and manage Kubernetes clusters efficiently. These APIs are accessible via kubectl, Kubernetes' command-line interface, or directly through HTTP requests to the Kubernetes API server (i.e., kube apiserver). If attackers exploit any of these connection points, it can lead to unauthorized access, especially if anonymous auth is not tightly controlled or disabled entirely.

#### etcd Exposure

etcd acts as the primary storage location for all cluster data, including the state and configuration of the Kubernetes cluster, Kubernetes Secrets, and passwords. Given its central role, etcd exposure presents a significant security risk. If etcd is compromised, it could lead to a number of security risks, such as unauthorized access to sensitive data (e.g., Kubernetes Secrets, keys, and tokens) or Kubernetes cluster tampering (e.g., altering the cluster state, deploying malicious containers, or modify configurations to weaken the cluster's security posture).

#### Kubernetes Secrets Leakage

The unauthorized access to sensitive information, such as passwords, tokens, or keys, can be caused by the unintended exposure of [Kubernetes secrets](https://www.paloaltonetworks.com/cyberpedia/kubernetes-secrets?ts=markdown). This leakage can occur due to misconfigurations, inadequate access controls, or insecure handling practices. When Kubernetes secrets are leaked, they can provide attackers with access to internal systems, databases, and other critical resources.

***Related Article:** [Kubernetes Security Posture Management (KSPM)](https://www.paloaltonetworks.com/cyberpedia/kubernetes-security-posture-management-kspm?ts=markdown)*

### What Are Examples of Kubernetes Container Security Risks?

Several significant cybersecurity threats target Kubernetes clusters. A cluster admin should understand these attack vectors, which range from exploiting vulnerabilities in the Kubernetes code itself to taking advantage of misconfigurations or weak security policies. The inherent complexity of Kubernetes means that securing it is a complex task that must take into account the nuances of the multitenant architecture and multicloud environments.

#### Data Breaches

The unauthorized access of sensitive data and subsequent data breaches can occur when Kubernetes Secrets are compromised, and attackers gain access to sensitive data, such as passwords and API keys.

#### Privilege Escalation

Privilege escalation (i.e., an attacker gains higher-level privileges than they should have) can be achieved by exploiting vulnerabilities in Kubernetes or by taking advantage of poorly configured RBAC.

#### Network Attacks

Network attacks can be a significant concern. Without properly implemented Kubernetes network policies, attackers could potentially gain access to a cluster's network and disrupt network traffic or intercept sensitive data.

## What Are Kubernetes Security Considerations and Security Best Practices?

When considering Kubernetes security, take advantage of the collective wisdom earned from experience. The following are commonly cited best practices that address the key security considerations in a Kubernetes environment.

#### Encrypt Sensitive Data

Use the Kubernetes mechanisms to encrypt data at rest. In Kubernetes, encryption keys are defined in a configuration file that is used to encrypt data stored in etcd, the distributed key-value store that Kubernetes uses to persist its state and configurations. This feature enhances the security of a Kubernetes cluster by ensuring that sensitive information (e.g., secrets, passwords, tokens, and SSH keys) in the etcd database is protected. Utilize Kubernetes' built-in support for secrets and consider integrating external secrets management solutions that offer enhanced security features. Regularly rotate encryption keys and manage access to them securely to prevent unauthorized access.

#### Enforce the Principle of Least Privilege

Enforcing [the principle of least privilege](https://www.paloaltonetworks.com/cyberpedia/what-is-least-privilege-access?ts=markdown) involves granting users, applications, and processes only as much access as needed to complete their intended functions. RBAC is a key tool in Kubernetes that allows administrators to define roles with specific permissions and bind those roles to users, groups, or service accounts. Additionally, using namespaces for resource isolation, applying pod security policies, and securely managing Secrets supports the enforcement of the principle of least privilege.

#### Implement Strong Access Controls

Maintain strong authentication and authorization controls to protect the Kubernetes environment. Use RBAC to restrict access to resources within the cluster, tightly coupling roles to users, groups, or service accounts based on their responsibilities. Also, employ namespace-based segmentation to limit access within isolated environments. Additionally, implement strong authentication mechanisms, such as mutual TLS (mTLS), for service-to-service communications. Finally, audit access policies and logs to detect and remediate unauthorized access attempts as well as keeping [access controls](https://www.paloaltonetworks.com/cyberpedia/access-control?ts=markdown) up to date with the principle of least privilege.

#### Install Updates and Patches Regularly

Regularly install updates and patches, including fixes for vulnerabilities, performance improvements, and additional security features that address emerging threats. Monitor sources such as the Kubernetes project's release notes and security advisories to stay informed about new vulnerabilities and available patches. Also, implement a consistent patch management process to ensure that the Kubernetes cluster remains protected against known vulnerabilities. Automation tools can help streamline the update process, minimizing downtime and reducing the risk of human error. Additionally, testing updates in a staging environment before deploying them in production can prevent potential disruptions to the Kubernetes environment.

#### Monitor and Audit the Attack Surface

Leverage Kubernetes native auditing features to conduct continuous logging, monitoring, and auditing of all activities and API calls. These generate detailed audit logs that capture chronological events affecting the cluster to detect suspicious activities or anomalies, trigger a timely response to potential security risks, and provide insights into security-relevant actions. The Audit Policy file should also be configured to define the rules for logging activities related to the Kubernetes API. Additionally, use tools designed for Kubernetes monitoring to continuously scan for misconfigurations, vulnerabilities, and deviations from policies and authorized usage in the Kubernetes environment. Also, integrate threat detection solutions that are specifically designed for a Kubernetes environment to identify potential threats proactively.

## What Are Advanced Strategies for Kubernetes Security?

#### Kubernetes-Native Security Tools

Using Kubernetes native security tools leverages the inherent capabilities of Kubernetes to enhance the security posture of containerized environments. These tools, which are integrated seamlessly into the Kubernetes environment, include network policies to enforce traffic control between pods, role-based access control (RBAC), and Pod Security Policies (PSPs). Also, use [Secrets management](https://www.paloaltonetworks.com/cyberpedia/secrets-management?ts=markdown) to securely store and provide access to sensitive information (e.g., passwords and tokens).

#### Image Policies

Implement image signing and verification to ensure integrity and trustworthiness and adopt a policy of using only trusted base images from reputable sources. In addition, select a base image with the minimal software packages necessary for the application to run. Also, prevent unwanted kernel modules from being loaded into containers using rules in "/etc/modprobe .d/kubernete blacklist .conf" of the node or by uninstalling the unwanted modules from the node.

#### Namespaces

Use namespaces in Kubernetes to limit the scope of resources by creating isolated environments within a single cluster. Namespaces facilitate fine-grained access control by applying RBAC policies specific to each namespace, ensuring users and applications have access only to the resources they require. This isolation allows for better management of resources across different teams or projects, reducing the risk of accidental or malicious interference between workloads.

#### Network Policies

By default, Kubernetes pods are non-isolated and accept traffic from any source. Employ network policies to apply policies to specific pods, restrict the flow of traffic between pod to pod and pod to external services, and control how pods communicate with each other and with other network endpoints. In addition, use network policies to implement a default deny firewall policy for a namespace, ensuring that only explicitly allowed connections are established. Kubernetes network policies should be reviewed regularly and updated to address changes in security risks.

#### Non-Root Isolation

By default, containers run with root privileges. These privileges can be exploited to gain unauthorized access to the host machine or other containers within the cluster. Running containers as non-root users eliminates this vulnerability by preventing an attacker from executing commands as the root user.

#### Read Only Filesystems

Enforce read only filesystems in Kubernetes to prevent unauthorized modifications to running containers. By setting containers to run with a read only root filesystem, the attack surface is reduced by disallowing write operations. This reduces the risk of malicious file modifications or the introduction of unwanted software that can compromise container integrity.

#### Runtime Security

Use [Kubernetes runtime security](https://www.paloaltonetworks.com/cyberpedia/runtime-security?ts=markdown) to protect applications during their execution, ensuring that malicious activities or vulnerabilities do not compromise containerized workloads. Kubernetes runtime security covers monitoring and securing running containers and the Kubernetes orchestration environment against threats. Key aspects of Kubernetes runtime security include implementing network policies to restrict traffic between pods, using security contexts to enforce privilege and access controls at the pod level, and deploying runtime security tools that can detect and prevent unauthorized activities based on behavioral analysis of containers.

#### Scanning

Continuously scan containers, container images, [image registries](https://www.paloaltonetworks.com/cyberpedia/what-is-container-security?ts=markdown), and dependencies for vulnerabilities using automated tools. Regularly rescan images in registries and containers running in the cluster to catch newly discovered vulnerabilities.

#### Secure API Server

Enable transport layer security (TLS) to ensure that all communications with the Kubernetes API server (i.e., kube apiserver) are encrypted, protecting against eavesdropping and tampering. Additionally, build in authentication mechanisms, such as client certificates, tokens, and basic authentication, to verify the identities of users and services interacting with the API server. Also, limit API server exposure to the internet and use network policies. Kubernetes supports multiple options for authorization mode to control access to the API server, ensuring secure operations within the cluster by ensuring that only authorized entities can interact with the cluster's control plane.

#### Service Mesh

Implement a service mesh to enhance security in microservices architectures by introducing a dedicated infrastructure layer that manages secure service-to-service communication. This will enable mutual TLS (mTLS) by default, ensuring encrypted traffic between services and authenticating service identities. A service mesh also provides fine-grained access control policies, allowing administrators to define which services can communicate with each other. In addition, a service mesh facilitates consistent and automated security policies across all services, including secure service discovery and integration with existing security protocols and tools. This delivers a comprehensive security posture without requiring changes to the application code.

## Kubernetes Cluster Security FAQs

### How do I secure my Kubernetes cluster?

Securing a Kubernetes cluster involves several key steps. Start by enabling RBAC to manage who has what kind of access to the system. Use third-party authentication for the API server to ensure only authorized entities can interact with the Kubernetes cluster. Protect the etcd with TLS, a firewall, and encryption. Build network security definitions into workloads. Configure authentication and authorization on the Kubernetes cluster and cluster nodes. Finally, use Kubernetes Secrets for all sensitive data to prevent unauthorized access.

### What are the 4 C's of Kubernetes security?

The 4 C's of Kubernetes security represent a holistic approach to securing containerized environments and include cloud, clusters, containers, and code.

* Cloud security focuses on protecting the infrastructure that hosts a Kubernetes cluster, including the management of access controls and network configurations to safeguard against external threats.
* Cluster security involves securing the Kubernetes cluster by implementing measures such as RBAC, network policies, and secure access to the API server.
* Container security emphasizes scanning container images for vulnerabilities, managing container runtime configurations, and ensuring container isolation.
* Code security entails securing the application code running within containers, addressing issues such as dependency vulnerabilities, and embedding security practices into the development lifecycle.

### What are the two areas of concern for securing Kubernetes?

Effectively securing Kubernetes revolves around two main areas of concern---cluster configuration and workload security. Cluster configuration encompasses the setup and maintenance of the Kubernetes cluster itself, focusing on aspects such as access controls, network policies, and the security of the underlying infrastructure. Workload security focuses on the applications running on Kubernetes, including container security, managing Secrets, scanning for vulnerabilities in container images, and implementing security contexts and policies for running pods.

### Why is Kubernetes more secure?

Kubernetes is considered more secure due to its comprehensive, native security features, including Kubernetes RBAC, Pod Security Policies (PSPs), and support for the principle of least privilege. This open-source solution also benefits from a highly active community that continuously works to identify and patch vulnerabilities.
Related content  
[The Definitive Guide to Container Security
Get the ultimate guide to securing your containers, your essential resource for understanding, implementing and mastering security in a containerized environment.](https://www.paloaltonetworks.com/resources/ebooks/container-security-definitive-guide?ts=markdown)  
[QlikTech Secures Container Development with AWS and Prisma Cloud
Explore how Qlik, a business intelligence company, leverages AWS and Prisma Cloud to secure container-based workloads and protect customer data in their Kubernetes deployments.](https://www.paloaltonetworks.com/resources/videos-customers/qliktech-secures-container-development-with-aws-and-prisma-cloud?ts=markdown)  
[Kubernetes Privilege Escalation: Excessive Permissions in Popular Platforms
To understand the impact of excessive permissions, we analyzed popular Kubernetes platforms --- distributions, managed services, and common add-ons --- to identify infrastructure compo...](https://www.paloaltonetworks.com/resources/whitepapers/kubernetes-privilege-escalation-excessive-permissions-in-popular-platforms?ts=markdown)  
[Guide to Operationalizing Your IaC Security Program
Infrastructure as code (IaC) plays a key role in containerized applications. Get a step-by-step plan to help you choose your IaC security path based on your needs, operationalize a...](https://www.paloaltonetworks.com/resources/whitepapers/guide-to-operationalizing-your-iac-security-program?ts=markdown)  
![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=Securing%20Your%20Kubernetes%20Cluster%3A%20Kubernetes%20Best%20Practices%20and%20Strategies&body=%20at%20https%3A//www.paloaltonetworks.cn/cyberpedia/kubernetes-cluster-security)  
返回页首  
{#footer}

## 产品和服务

* [实时人工智能驱动的网络安全](https://www.paloaltonetworks.cn/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.cn/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.cn/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.cn/sase/ai-access-security?ts=markdown)

* [云交付的安全服务](https://www.paloaltonetworks.cn/network-security/security-subscriptions?ts=markdown)

* [高级威胁预防](https://www.paloaltonetworks.cn/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.cn/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.cn/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.cn/network-security/advanced-dns-security?ts=markdown)

* [企业数据丢失防护](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.cn/network-security/enterprise-iot-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.cn/network-security/medical-iot-security?ts=markdown)

* [工业 OT 安全](https://www.paloaltonetworks.cn/network-security/industrial-ot-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)

* [新一代防火墙](https://www.paloaltonetworks.cn/network-security/next-generation-firewall?ts=markdown)

* [硬件防火墙](https://www.paloaltonetworks.cn/network-security/hardware-firewall-innovations?ts=markdown)

* [软件防火墙](https://www.paloaltonetworks.cn/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.cn/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.cn/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.cn/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.cn/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.cn/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.cn/sase?ts=markdown)

* [应用加速](https://www.paloaltonetworks.cn/sase/app-acceleration?ts=markdown)

* [自主数字体验管理](https://www.paloaltonetworks.cn/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.cn/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.cn/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.cn/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.cn/sase/sd-wan?ts=markdown)

* [远程浏览器隔离](https://www.paloaltonetworks.cn/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.cn/sase/saas-security?ts=markdown)

* [基于 AI 的安全运营平台](https://www.paloaltonetworks.cn/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.cn/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.cn/cortex/cloud/application-security?ts=markdown)

* [云态势安全](https://www.paloaltonetworks.cn/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.cn/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.cn/prisma/cloud?ts=markdown)

* [人工智能驱动的 SOC](https://www.paloaltonetworks.cn/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.cn/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.cn/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.cn/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.cn/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 托管检测和响应](https://www.paloaltonetworks.cn/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.cn/cortex/managed-xsiam?ts=markdown)

* [威胁情报和事件响应服务](https://www.paloaltonetworks.cn/unit42?ts=markdown)

* [主动评估](https://www.paloaltonetworks.cn/unit42/assess?ts=markdown)

* [事故响应](https://www.paloaltonetworks.cn/unit42/respond?ts=markdown)

* [安全策略转型](https://www.paloaltonetworks.cn/unit42/transform?ts=markdown)

* [发现威胁情报](https://www.paloaltonetworks.cn/unit42/threat-intelligence-partners?ts=markdown)

## 公司

* [关于我们](https://www.paloaltonetworks.cn/about-us?ts=markdown)
* [人才招聘](https://jobs.paloaltonetworks.com/en/)
* [联系我们](https://www.paloaltonetworks.cn/company/contact-sales?ts=markdown)
* [企业责任](https://www.paloaltonetworks.com/about-us/corporate-responsibility)
* [客户](https://www.paloaltonetworks.cn/customers?ts=markdown)
* [投资者关系](https://investors.paloaltonetworks.com/)
* [位置](https://www.paloaltonetworks.com/about-us/locations)
* [新闻资讯](https://www.paloaltonetworks.cn/company/newsroom?ts=markdown)

## 热门链接

* [博客](https://www.paloaltonetworks.com/blog/?lang=zh-hans)
* [社区](https://www.paloaltonetworks.com/communities)
* [内容库](https://www.paloaltonetworks.cn/resources?ts=markdown)
* [网络百科](https://www.paloaltonetworks.com/cyberpedia)
* [事件中心](https://events.paloaltonetworks.com/)
* [管理电子邮件首选项](https://start.paloaltonetworks.com/preference-center)
* [产品清单](https://www.paloaltonetworks.cn/products/products-a-z?ts=markdown)
* [产品认证](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance)
* [报告漏洞](https://www.paloaltonetworks.com/security-disclosure)
* [网站地图](https://www.paloaltonetworks.cn/sitemap?ts=markdown)
* [技术文档](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [请勿出售或分享我的个人信息](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [隐私](https://www.paloaltonetworks.com/legal-notices/privacy)
* [信任中心](https://www.paloaltonetworks.com/legal-notices/trust-center)
* [使用条款](https://www.paloaltonetworks.com/legal-notices/terms-of-use)
* [文档](https://www.paloaltonetworks.com/legal)

版权所有 © 2026 Palo Alto Networks。保留所有权利

* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/)
* CN  
  Select your language