Learn how Palo Alto Networks Advanced IP Defense detects and blocks direct-to-IP attacks that bypass traditional DNS and URL-based security controls. In this InterSECt 2026 demonstration, David Chen explains how organizations can configure Zero Trust IP protection in Strata Cloud Manager.
Attackers increasingly host command-and-control infrastructure on shared cloud IP addresses, where blocking an entire IP could disrupt legitimate business applications. Malware can then bypass DNS inspection by connecting directly to an IP address.
In this video, learn how to:
• Identify outbound connections made without a preceding DNS resolution
• Stop malware from connecting directly to command-and-control infrastructure
• Apply granular protection without blocking legitimate services on shared cloud IPs
• Configure an Advanced IP Defense outbound blocking profile
• Combine public cloud attributes with direct-to-IP or No-DNS detection
• Attach an Advanced IP Defense profile to a network security zone
• Deploy Zero Trust IP protection through Strata Cloud Manager
Advanced IP Defense combines real-time IP intelligence with direct-to-IP detection to stop outbound C2 traffic and other threats operating at the network layer.
Watch the full Deep Dive on-demand to see how to Stop Threats Earlier: Eliminate Frontier AI Exposure and Block Attacker Infrastructure:
https://www.paloaltonetworks.com/intersect?utm_medium=events&utm_campaign=-keynote-callout&webinar=eliminate-frontier-ai-exposure
Chapters:
00:00 Advanced IP Defense overview
00:14 Network-layer protection use cases
00:31 How attackers exploit shared cloud IPs
00:45 Direct-to-IP connections bypass DNS
00:58 Configure Zero Trust IP protection
01:06 Create an outbound blocking profile
01:21 Attach the profile to a security zone
#AdvancedIPDefense #NetworkSecurity #InterSECt2026
