Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Sorted by:

Author	Topic	Views	Replies
Vnithkumar 10-06-2026	Triggering of Packet based protection under Zone protection profile In the PA documentation, it says Zone protection is applicable to new connections that does not have any existing session. To mitigate flood protectio... posted in Next-Generation Firewall Discussions	33	0
kellon.c.kerr.mil 10-06-2026	Regarding using CLI Using CLI on Palo Alto by serial in for connection to ensure firewall is allowing access for panorama. posted in Next-Generation Firewall Discussions	35	1
bilertjulian 10-06-2026	API Access (Commit all) 403 after Update to 11.2.15 After patching our panorama to 11.2.15 our API Users can only do commits. commit all (push) is denied with 403.Nothing had been changed with the api ... posted in Next-Generation Firewall Discussions	86	0
DopedWafer 09-30-2026	12.1 Base update not available Hi all, I have a new PA-440, I've registered it and applied all the licensing. I've been updating the software on it but noticed there is no 12.1 base... posted in Next-Generation Firewall Discussions	186	1
W.Chin117351 10-06-2026	Help with file blocking security profiles Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download"... posted in Next-Generation Firewall Discussions	256	5

Blogs

Managing Firewalls at Hyperscale: OpenConfig on PAN-OS and the Future of Enterprise Network Automation

09-23-2026 — This blog was written by Feroz Vellaparambil Imagine managing tens of thousands of network devices across a global infrastructure — different vendors, different APIs, different data formats. Every vendor has its own configuration syntax and its own telemetry format. Building automation that wo... — Read more

Labels: NGFW PAN-OS
227 by JayGolf in Community Blogs

Palo Alto Networks Advanced WildFire now supports inline prevention for CMD, CHM, and CAB file-based malware

09-18-2026 — As threat actors abandon traditional executables to hide behind trusted Windows components, adversaries are weaponizing CMD batch scripts, Compiled HTML Help (.chm) files, and Cabinet (.cab) archives for stealthy initial access. Palo Alto Networks... — Read more

Labels: Advanced WildFire CDSS NGFW
511 1 by JayGolf in Community Blogs

Secure Edge Simplified: Announcing Native Layer 2 Switching on Palo Alto Networks NGFWs

08-31-2026 — With the release of PAN-OS 12.2 Ceres, Palo Alto Networks introduces native Layer 2 switching on select PA-500 and PA-1500 Series NGFWs. Organizations can now consolidate their branch footprint into a single, unified device that provides full VLAN... — Read more

Labels: Branch Security Configure Next Generation Firewall Layer 2 Switching Network Architecture NGFW PA-Series PAN-OS 12.2 Secure Edge
517 1 by alele in Community Blogs

Network Security for the Frontier AI Era: Introducing PAN-OS 12.2 Ceres

08-14-2026 — PAN-OS 12.2 Ceres introduces 55+ innovations across AI-powered threat prevention, autonomous operations, quantum resilience, cloud, OT security, and next-generation firewall platforms. Explore what’s new and how Ceres is advancing network security... — Read more

Labels: Next-Generation Firewall NGFW PAN-OS
2428 1 3 by JayGolf in Community Blogs

Extending Zero-Day Browser Protection to NGFW Users with Prisma Access RBI

07-30-2026 — Modern enterprise work happens in the browser, yet traditional signature-based security often misses the latest zero-day threats. While Remote Browser Isolation (RBI) has long been a staple for mobile users, many organizations relying on Next-Gene... — Read more

Labels: NetSec NGFW Prisma SASE Remote Browser Isolation Strata Web Security
774 1 by shv in Community Blogs

Articles

Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API

08-10-2026 — Check out this Nominated Discussion by @JeanPaul222 (JeanPaul Mansour, Systems Engineer at Crestan International) This step-by-step implementation guide provides a practical Windows PowerShell workflow for generating an on-demand Best Practice Assessment (BPA) via the Palo Alto Networks Strata ... — Read more

Labels: NGFW
1222 by JayGolf in General Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR cyberelite Docker Kubernetes NGFW Python Terraform
4149 5 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
15191 2 6 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
11741 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
19045 1 5 by JayGolf in Support FAQ