Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
T.Ceravalo 05-21-2026	Has anyone upgraded to 11.1.10h25 or h26? Just wondering if anyone has upgraded to the new versions and if they have had any issues? posted in Next-Generation Firewall Discussions	74	0
.522643 05-23-2026	EDL Performance and Refresh Handling in Panorama Hello, We are reviewing an EDL-based IOC blocking architecture using Palo Alto Networks firewalls with Panorama and Cortex XDR. Currently, IOC blockin... — Read more posted in Next-Generation Firewall Discussions	123	3
lucas.nascimento 05-23-2026	[FIREWALL] - Commit Issue Hi everyone, I'd like to request support for a recent problem I'm having. I have one cluster with two Palo Alto firewalls, one of which was recently u... — Read more 1 posted in Next-Generation Firewall Discussions	141	1
NetFox 05-19-2026	OSPF process crashes after manual HA Failover Hi All,I seem to have a very odd issue that when a manual HA failover is triggered, via changing the priority of the active firewall to be worse tha... — Read more 1 posted in Next-Generation Firewall Discussions	114	0
badermandhouj 05-21-2026	Multi-VSYS 11.2.8 - How to assign a dedicated Forward Trust Certificate per VSYS for SSL Decryption Hi everyone,I’m running PAN-OS 11.2.8 with Multi-VSYS enabled (3 VSYS). I need a different Forward Trust Certificate per VSYS for SSL decryption, but ... — Read more posted in Next-Generation Firewall Discussions	237	1

Blogs

NGFW with Panorama to Strata Cloud Manager Migration Technical Guide

03-24-2026 — Introduction This guide provides a comprehensive walkthrough for IT and security teams to seamlessly transition their NGFW management infrastructure from Panorama to Strata Cloud Manager, ensuring minimal disruption and maintaining robust security posture throughout the migration process. In... — Read more

Labels: Configuration and Management How-to Guide Migration Migration Tool NGFW Panorama PANOS SCM SCM Config Management Strata Cloud Manager Strata Cloud Manager Config Management Tools
4179 2 by binwang in Community Blogs

Operational Simplification with PAN-OS Orion Release

03-06-2026 — Panorama 12.1 Orion automates the manual tasks that typically slow down network administration, specifically focusing on lifecycle management and UI performance. It introduces HA upgrade orchestration for up to 200 pairs at once and standardized h... — Read more

Labels: Automation Network Management NGFW PAN-OS 12.1 Orion Panorama Product Release Software Update
2364 1 by rbhosale in Community Blogs

ADEM Enrichment Series: March Feature Spotlight

03-04-2026 — Modern IT teams need more than monitoring. They need proactive visibility and control. In this blog, we break down four powerful ADEM enhancements including Canary upgrades, building-level experience insights, helpdesk operational empowerment, and... — Read more

Labels: ADEM Autonomous ADEM NGFW Primsa SASE
1623 by JayGolf in Community Blogs

Cloud-Delivered Security Service (CDSS) February Newsletter

02-28-2026 — Cloud-Delivered Security Service: The Monthly Newsletter for Security That Never Sleeps Welcome to the February edition of the Cloud-Delivered Security Service (CDSS) Newsletter This month brings powerful momentum across CDSS, including the launch of our new 30 Day Free Trial designed to help y... — Read more

Labels: Advanced DNS Security Advanced Threat Protection Advanced URL Filtering Advanced WildFire malware detection CDSS DNS IoT Devices NGFW Threat Prevention URL Filtering WildFire
2031 by tbolatiwa in Community Blogs

Introducing Compliance Center: A Unified Approach to Regulatory and Security Compliance

12-09-2025 — As digital transformation accelerates, so does the risk of "audit fatigue," leaving your security team overwhelmed. Today, we launch Compliance Center, a unified dashboard that automatically assesses your entire Palo Alto Networks deployment again... — Read more

Labels: Audit Fatigue CIS CSC Cloud security Compliance Compliance Center Compliance Monitoring GRC Network Security NGFW NIST CSF PCI DSS Prisma Access Regulatory Compliance Risk Management Security Compliance Security Reporting Strata Cloud Manager
3550 by DRanjit in Community Blogs

Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR custom-featured-post cyberelite Docker Kubernetes NGFW Python Terraform
1393 5 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
13447 2 5 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
10125 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
14398 4 by JayGolf in Support FAQ

Palo Alto Networks NAT Session Distribution as a Way to Implement Server Load Balancing

05-30-2025 — The Palo Alto Network Destination NAT Session Distribution can be used to implement similar to Load Balancer functionality by using one of the "distribution" methods. — Read more

Labels: NAT Next-Generation Firewall NGFW
14205 4 2 by nikoolayy1 in General Articles