Software Firewalls Customer Update - May 2023

[emgarcia]

Hi everyone,

We hope you have been doing well! As we move beyond the quarantine times, we’d love to share some of the recent developments and major milestones we’ve achieved for organizations in 2023 with our Cloud NGFW, VM-Series virtual firewalls and CN-Series container firewalls.

Cloud NGFW for Azure:

Deploying Cloud NGFW for Azure on Azure Native UI: As an Azure-Native ISV managed service, Cloud NGFW for Azure is easy to deploy, operate and automate. It can be accessed directly from the Azure portal so it can be deployed in minutes, and operated just like any other Azure-native service.

Panorama Integration: Using Panorama to manage Cloud NGFW, customers can extend their existing policies to Azure, ensuring that the same best-in-class security is consistently applied to all of their applications, anywhere.

Secure VWAN Hub and VNET deployments: Provides a robust, secure and scalable connectivity between your hub and branches as well as your Azure VNet deployments

Cloud NGFW for AWS:

What’s New: Please check here to get the newest features in Cloud NGFW for AWS.

Panorama Integration: Customers can now use the Panorama appliance to manage security rules centrally on Cloud NGFW resources alongside your physical and virtual firewall appliances. Customers can manage all aspects of policy configurations in Cloud Device groups, push these policies, view logs, and generate reports on traffic patterns of your Cloud NGFW resources - all from a single Panorama console. The security policy configurations now include a variety of Objects and security services as enumerated here.

Cloud NGFW for AWS regions: We have expanded Cloud NGFW to 21 AWS regions globally to secure the VPC traffic of your AWS deployments.

Multi-VPC NGFW resource Reduce total cost of ownership (TCO) by sharing the same Cloud NGFW resource across different VPCs in different AWS accounts. You can now create endpoints for an NGFW resource in different VPCs and route traffic to the NGFW resource for inspection.

VM-Series AWS:

Support for Dual Stack traffic inspection - Inspect your IPv6  traffic on VM-Series firewall deployed behind an AWS Gateway Load Balancer. 

Support for AWS Secrets Manager- Use your cloud native AWS Secrets Manager to store and distribute your certificates to VM-Series.

Support for Nested DAG - Simplify your policy definition for AWS by nesting DAGs to automatically identify workload groups. 

VM-Series Azure:

Azure Panorama Orchestration: With support for workspace based Application Insight, orchestrate your security deployments on newer Azure regions via Panorama plugin, with ease.

Azure Gateway Load Balancer Integration: Inspect inbound traffic with full source visibility with VM Series Azure GWLB integration.

VM-Series GCP:

Shared VPC Support in Panorama GCP Plugin: Onboard host projects in the Panorama GCP Plugin v3.1.0 to track any/all applications deployed in Shared VPCs

HA Active/Passive Support in GCP: Use GCP’s native load-balancer failover feature to steer traffic from an Active VM-Series instance to a Passive instance. Check out our Terraform Template to get started! 

VM-Series NSX:

NSX-T 3.2 Support: Protect applications running on NSX 3.2 with comprehensive security, powered by VM-Series Firewall. 

VM-Series Nutanix:

VM-Series in Nutanix Cloud Cluster - Secure your north-south workload traffic flows with Palo Alto networks VM-Series firewall in your Nutanix Cloud cluster in Azure.  

CN-Series:

Hyperscale Security Fabric (for 5G): Create a scalable, resilient firewall cluster with an in-built load balancer to protect all traffic, be it containerized, virtualized, or bare-metal

Increased Pods/Node Support in Daemonset Deployments: Daemonset deployments now secure up to 125 applications per node (Kubernetes Service deployment mode has no such limitation).

(Noteworthy) Qualifications:

• Red Hat OpenShift 4.11 Support
• Google Anthos 1.12
• HA Support for the VM-Series on OCI in FIPS Mode in Commercial and Gov. Cloud