The Intelligence Layer: Supercharging CNGFWs with AIOps

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Community Blogs
3 min read
L1 Bithead

prneelakrish_3-1783590437349.png

 

by Pranesh Neelakrishnan, Principal Product Manager, Software Firewalls

 

Palo Alto Networks is introducing enhanced AIOps visibility and automated notification workflows for the Cloud Next-Generation Firewall (CNGFW) service now to provide customers with comprehensive oversight of their managed security environment. By surfacing deep telemetry and critical health incidents within the Strata Cloud Manager (SCM) AIOps dashboard, the service allows security teams to monitor performance and receive real-time updates via email or chat channels. The visibility in SCM is available for all customers with SCM subscription even though they do not use SCM for Policy Management, for example: Customers who use Panorama for Policy Management can also have visibility via the AIOps platform available in SCM. This update solves the "black box" challenge of managed SaaS offerings by providing the transparency needed to validate service levels and streamline communication with Palo Alto Networks support teams. Organizations can now leverage this telemetry to align security performance with broader business uptime requirements and cloud transformation goals.

 

Increase Service Transparency with CNGFW AIOps Telemetry

 

Direct access to dataplane CPU and packet buffer utilization provides a factual view of how the managed service handles your specific traffic loads. While Palo Alto Networks manages the underlying infrastructure, this transparency allows you to identify bursts in traffic. This visibility ensures you have the data required to engage support proactively, reducing the risk of unexpected packet drops and maintaining the reliability of your digital services.

 

Validate Infrastructure Health via Detailed Session Metrics

 

Comprehensive metrics for active sessions, throughput, and packets per second offer a clear window into the operational health of your cloud perimeter. Monitoring session utilization across different protocols allows your team to correlate application performance with firewall telemetry. This data-driven approach eliminates guesswork during cross-functional troubleshooting, providing your practitioners with the evidence needed to confirm that the security layer is performing at the required scale.

 

Review the integrated visibility within Strata Cloud Manager below to see how these metrics surface in your operational environment.

 

Session Table.png

 

Resource Metrics.png

 

Global Counter.png

 

Monitor Decryption Trends for Compliance and Audit Readiness

 

SSL Proxy utilization metrics reveal the percentage of traffic undergoing decryption, offering a vital signal for both security posture and regulatory compliance. Tracking these metrics ensures that your encrypted traffic volume remains within the expected parameters of the managed service. This level of insight allows you to document the efficacy of your security controls for internal audits and board-level reporting without requiring manual data collection.

 

Streamline Support Workflows with Automated Incident Notifications

 

The AIOps dashboard transforms passive monitoring into an active alert system by delivering critical service incidents directly to email or chat channels. This integration ensures that your team remains informed of service-level events the moment they occur. By receiving immediate notifications, you accelerate the process of opening informed support tickets, providing Palo Alto Networks engineers with the specific incident context needed to resolve infrastructure issues quickly.

 

Support Strategic Planning using Integrated Resource Insights

 

Visibility into configuration memory and connection establishment rates helps you understand the impact of policy complexity on the managed service. Tracking how large SCM configuration files utilize system memory provides a roadmap for long-term policy optimization. These insights enable your architects to plan future cloud expansions with a clear understanding of the service's current state, ensuring that security remains a stable foundation for ongoing business innovation. Learn more about Palo Alto Networks Cloud NGFW solutions or get started with a free trial at https://www.paloaltonetworks.com/network-security/cloud-ngfw.

  • 56 Views
  • 0 comments
  • 0 Likes
Labels
Contributors