* [Blog](https://www.paloaltonetworks.com.au/blog) * [Palo Alto Networks](https://www.paloaltonetworks.com.au/blog/corporate/) * [未分类](https://www.paloaltonetworks.com.au/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant) * Traps：保护资源敏感环境... # Traps：保护资源敏感环境 [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2019%2F02%2Fprotecting-resource-sensitive-environments-cn%2F%3Flang%3Dzh-hans) [](https://twitter.com/share?text=Traps%EF%BC%9A%E4%BF%9D%E6%8A%A4%E8%B5%84%E6%BA%90%E6%95%8F%E6%84%9F%E7%8E%AF%E5%A2%83&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2019%2F02%2Fprotecting-resource-sensitive-environments-cn%2F%3Flang%3Dzh-hans) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2019%2F02%2Fprotecting-resource-sensitive-environments-cn%2F%3Flang%3Dzh-hans&title=Traps%EF%BC%9A%E4%BF%9D%E6%8A%A4%E8%B5%84%E6%BA%90%E6%95%8F%E6%84%9F%E7%8E%AF%E5%A2%83&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/2019/02/protecting-resource-sensitive-environments-cn/?lang=zh-hans&ts=markdown) [](mailto:?subject=Traps：保护资源敏感环境) Link copied By [Danny Milrad](https://www.paloaltonetworks.com/blog/author/danny-milrad/?lang=zh-hans&ts=markdown "Posts by Danny Milrad") and [Eila Shargh](https://www.paloaltonetworks.com/blog/author/eila-shargh/?lang=zh-hans&ts=markdown "Posts by Eila Shargh") Feb 28, 2019 1 minutes [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) This post is also available in: [English (英语)](https://www.paloaltonetworks.com.au/blog/2018/12/traps-protecting-resource-sensitive-environments/ "切换到 英语(English)") [繁體中文 (繁体中文)](https://www.paloaltonetworks.com.au/blog/2019/02/protecting-resource-sensitive-environments-tw/?lang=zh-hant "切换到 繁体中文(繁體中文)") [日本語 (日语)](https://www.paloaltonetworks.com.au/blog/2019/02/protecting-resource-sensitive-environments-jp/?lang=ja "切换到 日语(日本語)") [한국어 (韩语)](https://www.paloaltonetworks.com.au/blog/2019/02/protecting-resource-sensitive-environments-kr/?lang=ko "切换到 韩语(한국어)") 不论是在 VDI 环境还是云工作负载中，虚拟端点和服务器面临着和物理对应物相同的网络安全挑战。这对负责为其进行防护的专业人员带来了一系列全新的运营和技术挑战。 在使用"黄金镜像"配置虚拟端点的虚拟环境中，为了保护端点免受已知漏洞侵害，需要频繁更新防病毒 (AV) 签名、应用打补丁和操作系统，这将成为一项巨大的挑战。许多传统的物理端点产品用于虚拟环境时，在运营和技术层面会产生很多无法预料的复杂问题。此外，即使是专门构建的虚拟安全防护产品，如果并不属于整体安全基础架构的一部分，也会经常在整体的安全架构中出现漏洞。 因此，急需一种新方法，能够从零开始保护虚拟和云环境；这种方法需要能够提供持续的防护且无需签名、补丁或更新；能够无缝集成到任何"虚拟"环境中；还需要是包含物理、虚拟和云计算环境的端到端安全平台的一部分。 [](https://players.brightcove.net/1050259881001/default_default/index.html?videoId=5739344199001) [![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2018/12/Screen-Shot-2018-12-14-at-2.05.38-PM-500x297.png)](https://players.brightcove.net/1050259881001/default_default/index.html?videoId=5739344199001) **无需打补丁或更新签名** 为了保护 VDI 和云工作负载免受已知漏洞的侵害，传统的安全防护程序在从黄金映像"启动"后，需要应用最新的防病毒签名、应用补丁和操作系统更新。这种要求带来了多种技术和运营挑战。 例如，所需的防病毒更新、应用补丁和系统更新会增加网络流量，消耗可用的带宽和系统资源。如果并未立即进行更新，管理员需要承担在非高峰时段安排更新的负担，这对于需要 24/7 全天候运营的组织而言是一个挑战。在完成所有必要的安全更新之前，从黄金映像中初始启动的端点和工作负载仍会受到侵害。 Palo Alto Networks Traps 不使用签名，也不依赖补丁或更新即可保护端点和服务器。Traps 能够同时对物理和虚拟系统进行保护，还能够防御已知和未知的漏洞利用，以及针对操作系统和应用漏洞的恶意可执行文件，而且无需签名或更新签名。不论是物理、虚拟还是云中的端点和服务器，一经启用就会受到保护。用于黄金映像或实时运行的系统的紧急补丁已成为过去时。 传统的安全防护产品不适合部署在 VDI 和云环境中，因为这些产品需要组织克服无法预料的技术和运营挑战。为消除这些挑战并保护虚拟环境，Traps 提供了一种新方法： * Traps 不使用签名，也不依赖补丁或更新，便可防御虚拟（或物理）端点和服务器中的漏洞利用和恶意软件。 * 一经启动，Traps 便会对 VDI 端点和服务器进行防护。 * 在 Traps 架构中已经构建了许可弹性和可扩展性。 * Traps 不会对系统进行扫描，因此不会影响共享存储和最终用户的生产力。 * Traps Advanced Endpoint Protection 已完全集成到 Palo Alto Networks Security Operating Platform 中，其中还包括 WildFire 恶意软件防御服务以及新一代防火墙。 **针对虚拟和云环境进行优化** 将针对物理端点构建的安全产品部署到虚拟环境中需要组织克服更多的逻辑和架构挑战。例如，组织必须开发一种机制在虚拟实例启动或关闭时跟踪和应用软件及系统许可。 在大规模的数千个同步虚拟会话发生时，安全产品必须能可靠地正常工作。在虚拟会话之间共享存储的 VDI 环境中，组织必须减少"检测"安全产品的核心功能，即系统扫描所造成的影响。 Traps 的设计初衷是在这些环境中无缝地进行工作。Traps 架构中构建了许可弹性及可扩展性，能够同时容纳数万个端点。Traps 不会对系统进行扫描，因此不会影响共享存储和最终用户的生产力。 **超越端点的安全平台** 仅针对保护虚拟端点而构建的安全产品通常缺乏广泛的情境情报，而这恰好是高效的企业安全架构的核心组件。集成的威胁情报包含新发现及之前遭遇的网络攻击中所使用的策略、技术和程序 (TTP)，这些情报是成功防护企业系统和网络的关键所在。 Traps 是 Palo Alto Networks Security Operating Platform 的重要组成部分，能够自动、实时地防御网络攻击，且不受组织中所部署的端点和系统的物理或虚拟性质影响。WildFire 是 Traps 中的重要组成部分，不论在组织中的哪些位置出现威胁，都会增强对相关威胁执行方和攻击活动的情境可视性与防御。 请观看在线研讨会"++[5 Endpoint Protection Best Practices](https://www.sans.org/webcasts/109540)++"来了解端点防护的基本要求，以及 Traps Advanced Endpoint Protection 如何易于部署和管理，并提供预防为先的方法来保护端点免受恶意软件、漏洞利用和勒索软件的侵害。 *** ** * ** *** ## Related Blogs ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### AI代理已經來臨，威脅也隨之而來](https://www.paloaltonetworks.com.au/blog/2025/05/ai-agents-threats/?lang=zh-hant) ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### Strata Copilot - 加速迈向自主网络安全的未来](https://www.paloaltonetworks.com.au/blog/network-security/strata-copilot/?lang=zh-hans) ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### 防火墙已死？至少本世纪不会！](https://www.paloaltonetworks.com.au/blog/2023/08/ngfw-is-not-dead-yet/?lang=zh-hans) ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### 面对性命攸关的时刻，如何实现可靠的医疗物联网安全](https://www.paloaltonetworks.com.au/blog/2022/12/medical-iot-security-to-depend-on/?lang=zh-hans) ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### 利用业界首创的 AIOps for NGFW 革新防火墙运行](https://www.paloaltonetworks.com.au/blog/2022/03/industry-first-aiops-for-ngfw/?lang=zh-hans) ### [未分类](https://www.paloaltonetworks.com/blog/category/%e6%9c%aa%e5%88%86%e7%b1%bb/?lang=zh-hant&ts=markdown) [#### Prisma Access 是保护远程用户安全的领先云服务](https://www.paloaltonetworks.com.au/blog/2021/08/prisma-access-leading-cloud-service-secure-remote-users/?lang=zh-hans) ### Subscribe to the Blog! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language