Network Security | Palo Alto Networks

Browse the Community

GlobalProtect

GlobalProtect is Palo Alto Networks network security for endpoints that protects your organization's mobile workforce by extending the Next-Generation Security Platform to all users, regardless of location. This page is dedicated to GlobalProtect resources to help you find answers.

20 Posts

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

156 Posts

Cloud Identity Engine

Palo Alto Networks' Cloud Identity Engine is a first-of-its-kind cloud-native identity synchronization and authentication service.

6 Posts

Panorama

Panorama provides a centralized network security management solution for all your Palo Alto Networks firewalls.

2 Posts

Prisma AIRS

Prisma AIRS is the most comprehensive AI Security solution in the world. This community page is built to share the inner workings of the solution and our learnings in building the airship as it flies. AI systems need a holistic approach to security and the threat landscape keepe evolving at a much faster rate than we have ever seen before. Learn ho...

Prisma Access Agent

"Traditional agents create significant operational complexity for IT teams, requiring constant maintenance, updates, and troubleshooting across a fragmented environment. Managing multiple agents increases overhead and leads to compatibility issues that drain IT resources. For end users, this complexity often results in degraded performance and prod...

4 Posts

AI Security & Innovation

Welcome to the Palo Alto Networks AI Security & Innovation page. This area is your go-to resource for understanding and enhancing security in AI applications, as well as exploring innovative solutions. Here, you'll find a range of materials designed to help you navigate the complexities of AI security and leverage cutting-edge technologies.

2 Posts

Quantum Security

Modern Cryptography is transitioning to using Post Quantum Ciphers (PQCs) to protect encrypted data and traffic from being easily decrypted by Quantum Computers, which are expected to be available in the next decade. Palo Alto networks NGFWs support this transition to PQCs starting with PAN-OS 11.1

2 Posts

Host Compliance Service for GlobalProtect

This video introduces the Host Compliance Service (HCS) feature for GlobalProtect, covering its overview, configuration, troubleshooting, and upgrade migration.Host Compliance Service (HCS) for GlobalProtect is a cloud-hosted, highly available, and distributed service designed to centralize endpoint posture assessment, distribution, and security...

Securing the Front Door: How to Protect Ingress Traffic with Cloud NGFW for AWS

Introduction Public-facing applications are frequent targets for varied cyber threats. Because threat actors often embed malicious payloads within valid HTTPS traffic, traditional Layer 3 and Layer 4 controls are often insufficient for protecting the network edge. Previously, securing ingress traffic required deploying and managing fleets of...

New Deployment Model: Integrating Cloud NGFW for AWS with Regional NAT Gateway

AWS recently launched the Regional NAT Gateway, an option that simplifies outbound traffic handling in Virtual Private Clouds (VPCs). For customers using Cloud NGFW for AWS, this feature reduces architectural overhead, increases resiliency, and maintains a strong security posture for egress traffic. This post details how Cloud NGFW uses the Re...

Cloud NGFW for AWS (SCM Try and Buy): Deployment Guide with Terraform

Introduction: Cloud NGFW for AWS is a fully managed, cloud-native firewall service delivered by Palo Alto Networks and natively integrated with Amazon Web Services. It combines the power of Palo Alto Networks’ industry-leading threat prevention technologies with the simplicity and scalability of an AWS-managed service. Built on machine learn...

Screenshot 2025-11-14 at 11.51.30 AM.png

Screenshot 2025-11-14 at 10.34.02 AM.png

Scaling Secure Outbound Traffic with Cloud NGFW for Azure and Zone Redundant Azure NAT Gateway

As organizations continue to expand their workloads in Azure, outbound connectivity has become a key part of maintaining both performance and security. Many applications rely on large volumes of outbound connections—whether reaching external APIs, SaaS platforms, update services, or partner systems. As these environments grow, managing those out...

Screenshot 2025-11-22 at 12.10.57 PM.png

Azure NAT Gateway Integration with Cloud NGFW

Learn how Cloud NGFW for Azure now integrates with Azure NAT Gateway to deliver scalable outbound connectivity and advanced security inspection. This video walks through the architecture, key benefits, and how the two services work together to provide secure, high-performance egress.

Use onprem hosted EDL from AWS CNGFW

Is it somehow possible to load an EDL from a server located in onprem network (not reachable from Internet)? From which interface / IP address does the AWS CNGFW tries to connect to EDL server? Can it make connection from an interface / IP address located in customer VPC? Could not find any documentation for this specific topic.

USER ID -cloud NGFW Azure

Hi , Any one enable USER ID on cloud NGFW on azure and working smoothly in there environment? We tried POC in our environment but we are observing intermittent discussion between Palolo agent and Cloud NGFW azure which affecting its integration. We already opened TAC case but havent seen positive progress Thanks Sanil Hande

Secure Traffic based on Azure Service Tags using Cloud NGFW for Azure

Secure Traffic based on Azure Service Tags using Cloud NGFW for Azure. Cloud NGFW managed using Panorama can leverage Azure Plugin to monitor Azure Service tags and use these tags as part of Dynamic Address groups that can be used to define Security Policies based on Service Tags. (function() { var wrapper = document.getElementById('lia-vid-637...

Seamless Single Sign-On with Palo Alto Networks GlobalProtect

The Challenge: Balancing Security and User Experience In the modern era of work where users, apps, devices, and data can reside anywhere and everywhere,enterprises are faced with an expanding attack surface and are required to provide an exceptional, frictionless experience for users. This is why it is essential that organizations deliver alwa...

Deploy Prisma Access Agent

Learn how to deploy Prisma Access Agents to secure the endpoints in your mobile workforce. Learn more here.

Prisma Access Agent License for NGFW Deployments

Review the licensing options and requirements to help you effectively deploy and manage Prisma Access Agent on your NGFW systems, ensuring integration with your existing infrastructure and adherence to licensing terms. Click here to learn more.

Prisma Access Agent Demo

(function() { var wrapper = document.getElementById('lia-vid-6371535558112w960h540r650'); var videoEl = wrapper ? wrapper.querySelector('video-js') : null; if (videoEl) { if (window.videojs) { window.videojs(videoEl).ready(function() { this.on('loadedmetadata', function() { this.el().querySelectorAll('.vjs-load-pro...

Prisma Access Agent Admin Guide

Learn about the prerequisites for the Prisma Access Agent, including the supported OS versions and the supported NGFW version. You can also learn about using Cloud Identity Engine for user authentication. Click here to Learn More.

UTD for Azure

There is an UTD for AWS. I do not see one for Azure. Given the vast difference between the two CSP are there any other professional services classes (I have already taken the PSE-PRO classes) for Cloud NGFW on Azure?