Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Sorted by:

Author	Topic	Views	Replies
M.Sridharan 07-30-2026	3 node cluster or HA Hi community. I am setting up a palo alto firewalls for a customer and they need it as 3 nodes. they are going to be placed in three different buid... posted in Next-Generation Firewall Discussions	158	6
SeanDeHarris 07-30-2026	License expired hello guru, what will happen if my either the support and CDSS license expired? I assumed the CDSS function will not work because no signature update... posted in Next-Generation Firewall Discussions	95	2
benjamin.kowalczyk 07-29-2026	Commit failed and firewall now down after reboot Hi, I have a weird issue on a cluster of two firewalls on active/active mode. Yesterday I tried to commit a small change on our policy, it was OK on... posted in Next-Generation Firewall Discussions	95	2
R.Moth 07-31-2026	PA-220 Login issue Hi Everyone We have a load of PA-220's in HA at variuos different sites, after a set period of time the devices stop allowing use to login. Does no... posted in Next-Generation Firewall Discussions	163	6
F.Pinar 07-27-2026	PA-460 VERSION 11.1.13-H7 Hi Team, please help me out with this issue an incident occurred on the PA-460 version 11.1.13-h7 A firewall, initially associated with intermittent ... posted in Next-Generation Firewall Discussions	80	0

Blogs

Extending Zero-Day Browser Protection to NGFW Users with Prisma Access RBI

07-30-2026 — Modern enterprise work happens in the browser, yet traditional signature-based security often misses the latest zero-day threats. While Remote Browser Isolation (RBI) has long been a staple for mobile users, many organizations relying on Next-Gene... — Read more

Labels: NetSec NGFW Prisma SASE Remote Browser Isolation Strata Web Security
98 by shv in Community Blogs

NGFW with Panorama to Strata Cloud Manager Migration Technical Guide

03-24-2026 — Introduction This guide provides a comprehensive walkthrough for IT and security teams to seamlessly transition their NGFW management infrastructure from Panorama to Strata Cloud Manager, ensuring minimal disruption and maintaining robust security posture throughout the migration process. In... — Read more

Labels: Configuration and Management How-to Guide Migration Migration Tool NGFW Panorama PANOS SCM SCM Config Management Strata Cloud Manager Strata Cloud Manager Config Management Tools
7732 6 by binwang in Community Blogs

Operational Simplification with PAN-OS Orion Release

03-06-2026 — Panorama 12.1 Orion automates the manual tasks that typically slow down network administration, specifically focusing on lifecycle management and UI performance. It introduces HA upgrade orchestration for up to 200 pairs at once and standardized h... — Read more

Labels: Automation Network Management NGFW PAN-OS 12.1 Orion Panorama Product Release Software Update
3623 1 by rbhosale in Community Blogs

ADEM Enrichment Series: March Feature Spotlight

03-04-2026 — Modern IT teams need more than monitoring. They need proactive visibility and control. In this blog, we break down four powerful ADEM enhancements including Canary upgrades, building-level experience insights, helpdesk operational empowerment, and... — Read more

Labels: ADEM Autonomous ADEM NGFW Primsa SASE
1758 by JayGolf in Community Blogs

Cloud-Delivered Security Service (CDSS) February Newsletter

02-28-2026 — Cloud-Delivered Security Service: The Monthly Newsletter for Security That Never Sleeps Welcome to the February edition of the Cloud-Delivered Security Service (CDSS) Newsletter This month brings powerful momentum across CDSS, including the launch of our new 30 Day Free Trial designed to help y... — Read more

Labels: Advanced DNS Security Advanced Threat Protection Advanced URL Filtering Advanced WildFire malware detection CDSS DNS IoT Devices NGFW Threat Prevention URL Filtering WildFire
2229 by tbolatiwa in Community Blogs

Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR cyberelite Docker Kubernetes NGFW Python Terraform
3337 5 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
14474 2 5 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
11179 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
17253 5 by JayGolf in Support FAQ

Palo Alto Networks NAT Session Distribution as a Way to Implement Server Load Balancing

05-30-2025 — The Palo Alto Network Destination NAT Session Distribution can be used to implement similar to Load Balancer functionality by using one of the "distribution" methods. — Read more

Labels: NAT Next-Generation Firewall NGFW
15275 4 2 by nikoolayy1 in General Articles