Next Generation Firewall

Upgrade your cybersecurity defences with our next-generation firewall. Experience advanced threat prevention, real-time intelligence, and seamless integration for comprehensive protection against evolving cyber threats.

Subscription you can use with firewall

IOT
The IoT Security solution integrates with advanced firewalls to identify and update IoT devices using AI and machine learning. It categorizes new devices, suggests traffic policies, and creates device attributes for firewall rules automatically.

SD-WAN
Enhances PAN-OS security with intelligent path selection. Managed by Panorama, the SD-WAN setup includes centralized configuration, automatic VPN setup, traffic routing, and monitoring for easy troubleshooting.

Threat Protection
Threat Prevention features antivirus, anti-spyware, and vulnerability protection, along with built-in dynamic lists to secure your network from malicious hosts. It also detects infected hosts attempting to access malicious domains.

DNS Security
Enhances DNS sinkholing by using DNS Security, a cloud-based service with advanced analytics and machine learning to generate DNS signatures. This service offers access to Palo Alto Networks’ growing DNS threat intelligence. To activate DNS Security, you need a Threat Prevention license.

URL Filtering
Enables precise web access control and user interaction management with dynamic URL categories, preventing credential theft by regulating access to corporate credentials. Activate URL Filtering by subscribing to the PAN-DB database for access to the public or private cloud.

Advanced URL Filtering
Advanced URL Filtering uses a cloud-based, machine learning-powered web security engine to inspect web traffic in real-time, reducing reliance on URL databases and external web crawling to detect and prevent advanced web-based attacks.

Wildfire
While the Threat Prevention license offers basic Wildfire support, the Wildfire subscription provides advanced features such as immediate threat coverage, frequent signature updates, advanced file type forwarding, and Wildfire API file uploads. It’s also necessary for firewalls forwarding files to an on-premises WF-500 appliance.

Advanced Wildfire
Advanced Wildfire is a subscription service with Intelligent Run-time Memory Analysis, enhancing static and dynamic analysis to detect and block evasive malware using cloud-based detection infrastructure.

Auto Focus
Analyzes firewall traffic logs graphically and highlights network risks using threat intelligence from the Autofocus portal. An active license allows you to initiate Autofocus searches based on firewall logs.

Cortex Data Lake
Offers centralized log storage and aggregation in the cloud. Cortex Data Lake is essential or strongly recommended to support various other cloud-delivered services like Cortex XDR, IoT Security, Prisma Access, and Traps management.

GlobalProtect Gateway
Offers mobility solutions and large-scale VPN capabilities. Basic GlobalProtect portals and gateways are free, while advanced features require a separate GlobalProtect Gateway license per gateway.

Virtual Systems
This perpetual license enables support for multiple virtual systems on PA-3200 Series firewalls. To increase virtual systems beyond defaults on PA-5200 Series, PA-5450, and PA-7000 Series, a Virtual Systems license is needed (varying by platform). Virtual systems aren’t supported on PA-220, PA-400 Series, PA-800 Series, and VM-Series firewalls.

Enterprise data loss Prevention (DLP)
Enterprise DLP provides cloud-based defense against unauthorized access and misuse of sensitive data. It employs machine learning, data patterns, and Boolean logic for accurate detection and policy enforcement.

Saas Security Inline
SaaS Security, with Cortex Data Lake, discovers all network SaaS apps, including Shadow IT. It enforces policy rules on Palo Alto Networks firewalls and integrates with App-ID Cloud Engine (ACE).