Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Sorted by:

Author	Topic	Views	Replies
patrickmatt 10-22-2026	CVE-2026-109618 and CVE-2026-109619 in PHP - PanOS affected? Hi, you probably heard about the CVEs mentioned above. Details: CERT-EU - Critical Vulnerabilities in PHPIs PanOS utilizing PHP and if yes what must b... 4 posted in Next-Generation Firewall Discussions	7867	21
R.Tabira 10-20-2026	PAN-OS 12.1.2 Features - Operational and Performance Impact of Brotli Inspection and DNS Security Logging Attention: Global TPM team, Hello Team, I would like to confirm the operational and performance impact of the following features introduced in PAN-O... posted in Next-Generation Firewall Discussions	105	1
reynanda.al 10-19-2026	License Validity Date Mismatch on Palo Alto PA-1410 Firewall Without License Renewal I have checked the purchase documentation, which states that the license validity period is from December 24, 2025, to December 23, 2026. However, the... posted in Next-Generation Firewall Discussions	99	1
R.Tabira 10-19-2026	Impact of "Sync to HA Peer" During PAN-OS Image Synchronization Attention: Global TPM Team Hello Team, General product behavior question. When using "Sync to HA Peer" to synchronize a PAN-OS software image to a... posted in Next-Generation Firewall Discussions	151	1
S.Mathew841872 10-18-2026	Guidance on Getting Started with Enterprise DLP Testing for PII/PHI Protection We recently deployed a Palo Alto Networks firewall and, as part of the implementation, received 200 Prisma Access licenses. I also requested an Enter... posted in Next-Generation Firewall Discussions	130	0

Blogs

DIY AI Security: A First Look at the Custom App-ID Signature Generator

10-22-2026 — Stop Flying Blind with unknown-tcp: Securing niche and homegrown AI tools used to mean hours of tedious PCAP diving and complex regex writing. Learn how the new Custom App-ID Signature Generator in Applipedia lets you build, risk-rate, and deploy ... — Read more

Labels: Applipedia CDSS NGFW
87 by inoumba in Community Blogs

Palo Alto Networks Ranks #1: Leading the 2026 URL Filtering Benchmark in Security and Efficiency Across NGFW and SSE

10-21-2026 — Traditional security solutions handle known web threats reasonably well, but what happens when custom, AI-generated attacks hit your network before threat feeds can catch them? SecureIQLab’s 2026 independent validation reports confirm Palo Alto Ne... — Read more

Labels: NGFW Prisma Access
168 by tuvu01 in Community Blogs

Securing Transport: Introducing DNS over TLS (DoT) Support for Advanced DNS Security Resolver (ADNSR)

10-08-2026 — Advanced DNS Security Resolver (ADNSR) now supports DNS over TLS (DoT)! Learn how this enhancement secures DNS traffic with end-to-end encryption over TCP port 853, helping organizations protect against eavesdropping and tampering while maintainin... — Read more

Labels: ADNS ADNS Resolver CDSS NGFW
260 by JayGolf in Community Blogs

Finding What You Need, Faster: Meet the New AI-Powered Search and Copilot Navigation in Strata Cloud Manager!

10-08-2026 — Discover what's new in Strata Cloud Manager (SCM)! Explore enhanced AI-powered search and actionable Strata Copilot responses that help customers quickly find technical documentation, navigate SCM, and streamline troubleshooting and daily security... — Read more

Labels: NGFW Strata Cloud Manager
341 by JayGolf in Community Blogs

Managing Firewalls at Hyperscale: OpenConfig on PAN-OS and the Future of Enterprise Network Automation

09-23-2026 — This blog was written by Feroz Vellaparambil Imagine managing tens of thousands of network devices across a global infrastructure — different vendors, different APIs, different data formats. Every vendor has its own configuration syntax and its own telemetry format. Building automation that wo... — Read more

Labels: NGFW PAN-OS
321 by JayGolf in Community Blogs

Articles

Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API

08-10-2026 — Check out this Nominated Discussion by @JeanPaul222 (JeanPaul Mansour, Systems Engineer at Crestan International) This step-by-step implementation guide provides a practical Windows PowerShell workflow for generating an on-demand Best Practice Assessment (BPA) via the Palo Alto Networks Strata ... — Read more

Labels: NGFW
1726 1 1 by JayGolf in General Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR cyberelite Docker Kubernetes NGFW Python Terraform
4378 5 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
15357 2 6 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
11934 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
19403 1 5 by JayGolf in Support FAQ