Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
D.Gwozdz 05-13-2026	11.2.10-h6 details?? Can we please having more info than "This hotfix includes performance and bug fixes"? posted in Next-Generation Firewall Discussions	185	2
surya_sapui 05-13-2026	Palo Alto Site to Site VPN ipsec tunnel up but unable to ping Source to destination Dear Team, When I am doing implement Site to Site VPN ipsec tunnel then tunnel status is down & Ike gateways is down after test commands manuall... — Read more posted in Next-Generation Firewall Discussions	262	2
Otsuka 05-13-2026	Regarding the migration from HDD to SSD for PA-VM running in the Azure environment Hello everyone,We are deploying and building a PA VM on Azure.During deployment, there was no option to select between HDD and SSD, so we built it on ... — Read more posted in Next-Generation Firewall Discussions	141	2
S.Chougule552919 05-12-2026	OpenSSH CVE-2025-61984 on PANOS Hi All, Does anyone know if CVE-2025-61984 for OpenSSH applies to PANOS. I think it would not but could not find any knowledgebase article or commun... — Read more posted in Next-Generation Firewall Discussions	222	2
Netzer 05-06-2026	Palo Alto 820 - Software Update for CVE-2026-0300 Hi there, I'm trying to patch the current secruity waring for CVE-2026-0300, but it is not clear to me which software version will fix the problem. ... — Read more posted in Next-Generation Firewall Discussions	1361	8

Blogs

NGFW with Panorama to Strata Cloud Manager Migration Technical Guide

03-24-2026 — Introduction This guide provides a comprehensive walkthrough for IT and security teams to seamlessly transition their NGFW management infrastructure from Panorama to Strata Cloud Manager, ensuring minimal disruption and maintaining robust security posture throughout the migration process. In... — Read more

Labels: Configuration and Management How-to Guide Migration Migration Tool NGFW Panorama PANOS SCM SCM Config Management Strata Cloud Manager Strata Cloud Manager Config Management Tools
3712 1 by binwang in Community Blogs

Operational Simplification with PAN-OS Orion Release

03-06-2026 — Panorama 12.1 Orion automates the manual tasks that typically slow down network administration, specifically focusing on lifecycle management and UI performance. It introduces HA upgrade orchestration for up to 200 pairs at once and standardized h... — Read more

Labels: Automation Network Management NGFW PAN-OS 12.1 Orion Panorama Product Release Software Update
2198 1 by rbhosale in Community Blogs

ADEM Enrichment Series: March Feature Spotlight

03-04-2026 — Modern IT teams need more than monitoring. They need proactive visibility and control. In this blog, we break down four powerful ADEM enhancements including Canary upgrades, building-level experience insights, helpdesk operational empowerment, and... — Read more

Labels: ADEM Autonomous ADEM NGFW Primsa SASE
1594 by JayGolf in Community Blogs

Cloud-Delivered Security Service (CDSS) February Newsletter

02-28-2026 — Cloud-Delivered Security Service: The Monthly Newsletter for Security That Never Sleeps Welcome to the February edition of the Cloud-Delivered Security Service (CDSS) Newsletter This month brings powerful momentum across CDSS, including the launch of our new 30 Day Free Trial designed to help y... — Read more

Labels: Advanced DNS Security Advanced Threat Protection Advanced URL Filtering Advanced WildFire malware detection CDSS DNS IoT Devices NGFW Threat Prevention URL Filtering WildFire
2009 by tbolatiwa in Community Blogs

Introducing Compliance Center: A Unified Approach to Regulatory and Security Compliance

12-09-2025 — As digital transformation accelerates, so does the risk of "audit fatigue," leaving your security team overwhelmed. Today, we launch Compliance Center, a unified dashboard that automatically assesses your entire Palo Alto Networks deployment again... — Read more

Labels: Audit Fatigue CIS CSC Cloud security Compliance Compliance Center Compliance Monitoring GRC Network Security NGFW NIST CSF PCI DSS Prisma Access Regulatory Compliance Risk Management Security Compliance Security Reporting Strata Cloud Manager
3420 by DRanjit in Community Blogs

Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR custom-featured-post cyberelite Docker Kubernetes NGFW Python Terraform
725 6 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
13328 2 5 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
9962 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
14040 4 by JayGolf in Support FAQ

Palo Alto Networks NAT Session Distribution as a Way to Implement Server Load Balancing

05-30-2025 — The Palo Alto Network Destination NAT Session Distribution can be used to implement similar to Load Balancer functionality by using one of the "distribution" methods. — Read more

Labels: NAT Next-Generation Firewall NGFW
12610 4 2 by nikoolayy1 in General Articles