Securing the Front Door: How to Protect Ingress Traffic with Cloud NGFW for AWS

Introduction Public-facing applications are frequent targets for varied cyber threats. Because threat actors often embed malicious payloads within valid HTTPS traffic, traditional Layer 3 and Layer 4 controls are often insufficient for protecting the network edge. Previously, securing ingress traffic required deploying and managing fleets of...

New Deployment Model: Integrating Cloud NGFW for AWS with Regional NAT Gateway

AWS recently launched the Regional NAT Gateway, an option that simplifies outbound traffic handling in Virtual Private Clouds (VPCs). For customers using Cloud NGFW for AWS, this feature reduces architectural overhead, increases resiliency, and maintains a strong security posture for egress traffic. This post details how Cloud NGFW uses the Re...

Cloud NGFW for AWS (SCM Try and Buy): Deployment Guide with Terraform

Introduction: Cloud NGFW for AWS is a fully managed, cloud-native firewall service delivered by Palo Alto Networks and natively integrated with Amazon Web Services. It combines the power of Palo Alto Networks’ industry-leading threat prevention technologies with the simplicity and scalability of an AWS-managed service. Built on machine learn...

Scaling Secure Outbound Traffic with Cloud NGFW for Azure and Zone Redundant Azure NAT Gateway

As organizations continue to expand their workloads in Azure, outbound connectivity has become a key part of maintaining both performance and security. Many applications rely on large volumes of outbound connections—whether reaching external APIs, SaaS platforms, update services, or partner systems. As these environments grow, managing those out...

Azure NAT Gateway Integration with Cloud NGFW

Learn how Cloud NGFW for Azure now integrates with Azure NAT Gateway to deliver scalable outbound connectivity and advanced security inspection. This video walks through the architecture, key benefits, and how the two services work together to provide secure, high-performance egress.

Use onprem hosted EDL from AWS CNGFW

Is it somehow possible to load an EDL from a server located in onprem network (not reachable from Internet)? From which interface / IP address does the AWS CNGFW tries to connect to EDL server? Can it make connection from an interface / IP address located in customer VPC? Could not find any documentation for this specific topic.

Memory Management Best Practices for ION1000, ION2000, ION1200 Platforms

This article provides guidance to customers with lower end ION Platform (ION1000, ION2000, ION1200) for memory management considerations prior to upgrading ION software. 1. Introduction: Understanding Memory Considerations for ION Platforms Lower end ION Platforms (ION1000, ION2000, ION1200) which are running ION Element SW series 5.x and c...

USER ID -cloud NGFW Azure

Hi , Any one enable USER ID on cloud NGFW on azure and working smoothly in there environment? We tried POC in our environment but we are observing intermittent discussion between Palolo agent and Cloud NGFW azure which affecting its integration. We already opened TAC case but havent seen positive progress Thanks Sanil Hande

AI Access Security Innovations

Secure Traffic based on Azure Service Tags using Cloud NGFW for Azure

Secure Traffic based on Azure Service Tags using Cloud NGFW for Azure. Cloud NGFW managed using Panorama can leverage Azure Plugin to monitor Azure Service tags and use these tags as part of Dynamic Address groups that can be used to define Security Policies based on Service Tags. (view in My Videos)

ZTNA Connector 6.0 Feature Enhancements

Learn about ZTNA 6.0 New Features & Enhancements

What's New in CDSS Advanced Threat Prevention and Advanced Wildfire

This session will highlight how our cutting-edge Advanced Threat Prevention (ATP) and Advanced WildFire technologies are evolving to proactively stop new and emerging threats before they can impact your business.

Diagnose, Detect & Resolve: Introducing AI-Powered ADEM

Universal ZTNA Simplified with Prisma SD-WAN

Learn how Prisma SD-WAN & Seamless Wi-Fi Switching Integration extends Zero Trust to the LAN

Seamless Single Sign-On with Palo Alto Networks GlobalProtect

The Challenge: Balancing Security and User Experience In the modern era of work where users, apps, devices, and data can reside anywhere and everywhere,enterprises are faced with an expanding attack surface and are required to provide an exceptional, frictionless experience for users. This is why it is essential that organizations deliver alwa...