Helm shuts out one compromised remote session, and the rest of your team keeps working.
Talk to usHelm detects ransomware in your files and contains it within the limits your team sets. With Palo Alto Networks, it can also have the firewall end the compromised user’s GlobalProtect VPN session, while everyone else stays connected.
Remote access keeps people productive, and it can also carry an attack from a home laptop to your file servers. Helm watches file shares, servers and Microsoft 365, detects encryption in under a second and contains the attack at the data.
GlobalProtect extends Palo Alto Networks firewall policies to people working from anywhere, with gateways enforcing security for their traffic. Helm spots the ransomware, and the GlobalProtect gateway removes the compromised user’s remote connection.
When Helm contains an attack, it can find the compromised user’s active GlobalProtect session and have the gateway log it out. Other users keep their GlobalProtect connections.
The Helm incident records the logout next to the files that were contained, and your team chooses when the user can reconnect.
Palo Alto Networks protects the traffic, and Helm protects the data at the end of it. If you run Cortex XDR too, see how Helm works with it, or see Helm with Cisco.
See all integrations, or talk to us about adding Helm to your Palo Alto Networks environment.
Cisco integration
Forescout integration
Fits the stack you have.
