Falco

Protect Your Network with Continuous Firewall Audits and Real-Time Support

Optimize your network protection with Falco’s dedicated solution for Palo Alto networks—featuring automated firewall audits, dynamic IP updates, and proactive threat alerts. Falco empowers your team with continuous, on-demand security expertise, ensuring your defenses are always robust and ready to adapt to any threat.

Detect and Resolve Firewall Misconfigurations with Expert Precision

Utilize Advanced Security Monitoring Tailored for Palo Alto Networks

Access On-Demand Support from Palo Alto Specialists

Request Product Demo

Trusted Palo Alto Networks Partner

Protect Your Network with Continuous Firewall Audits and Real-Time Support

Optimize your network protection with Falco’s dedicated solution for Palo Alto networks—featuring automated firewall audits, dynamic IP updates, and proactive threat alerts. Falco empowers your team with continuous, on-demand security expertise, ensuring your defenses are always robust and ready to adapt to any threat.

Detect and Resolve Firewall Misconfigurations with Expert Precision

Utilize Advanced Security Monitoring Tailored for Palo Alto Networks

Access On-Demand Support from Palo Alto Specialists

Request Product Demo

Trusted Palo Alto Networks Partner

Palo Alto Certified Experts:

Why Choose Falco?

Digital Scepter has extensive experience installing, configuring and managing Palo Alto Networks.

17 Years of Palo Alto Networks Expertise

Leverage Falco’s deep experience with Palo Alto Networks’ firewalls, offering not just setup but continuous optimization. Benefit from our in-depth audits and actionable insights, tailored to your security landscape.

Maximize Your Firewall’s Value with Proactive Support

With detailed, weekly reports and on-demand expert assistance, Falco ensures your firewalls are always up-to-date and optimally configured. We help you maintain a strong security posture by identifying risks and addressing them before they become threats.

Why Choose Falco?

Digital Scepter has extensive experience installing, configuring and managing Palo Alto Networks.

17 Years of Palo Alto Networks Expertise

Leverage Falco’s deep experience with Palo Alto Networks’ firewalls, offering not just setup but continuous optimization. Benefit from our in-depth audits and actionable insights, tailored to your security landscape.

Maximize Your Firewall’s Value with Proactive Support

With detailed, weekly reports and on-demand expert assistance, Falco ensures your firewalls are always up-to-date and optimally configured. We help you maintain a strong security posture by identifying risks and addressing them before they become threats.

Detecting Misconfigurations Effortlessly at:

What We Offer

Traditionally, performing a detailed health check is a manual process that doesn’t scale past a few devices. Falco can scan you entire configuration in under a second and immediately highlight the most important issues that need addressing.

The service continuously monitors your firewall configuration via the built-in API and sends you detailed reports on a regular basis. The report structure mirrors the UI layout on the firewalls to aid reviewers with remediation efforts.

In addition to connecting directly to firewalls, Falco can connect to Panoramas and scan all connected devices. As firewalls are added and removed from Panorama, they will be automatically added and removed from your reports. Falco also has a series of Panorama-specific checks to make sure your Panorama is configured correctly.

Falco comes by default with up to two tickets per month. These can be used to have more immediate access to experts that can fix your firewall problems quickly to minimize unplanned outages. They can also be used for configuration changes, planning, OS upgrades and more. The service agreement has complete details on the ticket entitlements.

Every time there is a change to the configuration on a firewall or Panorama a new config version is created and saved. Every hour Falco will download all the configuration versions it can, keeping the latest one hundred revisions. In the event of a hardware failure you can quickly restore a replacement device or an on-site-spare with the config backups we keep.

These backups are optional, and can be disabled if you'd prefer to handle this yourself.

Decryption is the bread and butter of the Palo Alto Networks platform. Without it traffic visibility is severely limited which in turn means that you can't get the most out of your investment. Falco Plus customers can take advantage of our vast experience getting SSL Decryption running. We have a tried-and-true SSL Decryption project plan that can be customized for your organization.

When a check that was previously passing fails the Falco service can optionally send you a regression notification email. In the email, you’ll find details of exactly what changed along with a full report at the time of the regression. Often times misconfigurations can go undetected for a long time until they cause trouble. With regression emails enabled you'll be alerted if the configuration change you just made introduced a potential issue.

If you are providing firewalls as a service, Falco can optionally treat all VSYS on a firewall as separate devices. This allows you to send a report to the operators of each VSYS that only contains information relevant to them. Each report will contain only the checks that are relevant to that VSYS. Configuration regression notifications are also per-VSYS capable.

One of the most critical maintenance tasks is patching infrastructure to stay ahead of the latest known vulnerabilities, and firewalls are no different. Palo Alto publishes a list of all known vulnerabilities for the PAN-OS platform but determining which affect your firewalls is left up to you.

With Falco, outstanding vulnerabilities are just another check. When a vulnerability that affects one of your devices is published you’ll get a regression email from the Falco service with all the details. You’ll never have to manually cross-reference your firewall versions with the vulnerability database ever again.

External Dynamic Lists, or EDLs, or a powerful tool in your Palo Alto Networks firewall that allow you to use a list hosted on an external server as an object in your rulebase. Our EDL service tracks many of the most popular cloud services and allows you to easily block or allow these in your rulebase. Gone are the days of manually maintaining address groups with hundreds or thousands of networks that frequently change.

Falco Plus customers can customize a firewall management schedule to deploy regular skilled engineer time on your firewall. Whether you want a once a monthly review meeting or a weekly work session we can make it happen.

Tier options

Choose the tier that's tight tor your organization.