Next-Generation Firewall | Palo Alto Networks

Buy or Renew

Next-Generation Firewalls

Our Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control.

Next-Generation Firewalls

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Sorted by:

Author	Topic	Views	Replies
gdu_palo 09-23-2026	Website blocked automatically by the firewall I am using PA-410. In our network, one specific website is blocked automatically by the firewall. I created a URL filtering, added URLs to the whiteli... posted in Next-Generation Firewall Discussions	57	2
P.Esposito 09-22-2026	Upgrade release Hello everyone, For a customer, I need to upgrade the release from 10.2.7-h8 to 12.2.2. I would like to understand which steps are necessary to perfor... posted in Next-Generation Firewall Discussions	81	1
A.Haleem849724 09-18-2026	PDF not getting blocked by pre defined Data patterns We do not see the pdf format getting listed under file type in predefined patterns. Below is the ref. screenshot, What are the expectation by sele... posted in Next-Generation Firewall Discussions	157	2
Tgarner3800 09-17-2026	trojan/Win32.deceiver.d - False Positive? I have noticed that PA NGFW sees this threat trojan/Win32.deceiver.d using Logon.exe from PCs in a specific zone (zone 1) going to our DCs that happen... posted in Next-Generation Firewall Discussions	170	1
DanielS.Romero 09-10-2026	[SOLVED] THE NGFW's DHCP SERVER AND DHCP RELAY SUDDENLY ARE NOT WORKING!! Hello, LiveCommunity team! I created this post to share my experience with an issue on our branch PA-1420 NGFW, which is configured to act as both a... posted in Next-Generation Firewall Discussions	353	1

Blogs

Managing Firewalls at Hyperscale: OpenConfig on PAN-OS and the Future of Enterprise Network Automation

09-23-2026 — This blog was written by Feroz Vellaparambil Imagine managing tens of thousands of network devices across a global infrastructure — different vendors, different APIs, different data formats. Every vendor has its own configuration syntax and its own telemetry format. Building automation that wo... — Read more

Labels: NGFW PAN-OS
38 by JayGolf in Community Blogs

Palo Alto Networks Advanced WildFire now supports inline prevention for CMD, CHM, and CAB file-based malware

09-18-2026 — As threat actors abandon traditional executables to hide behind trusted Windows components, adversaries are weaponizing CMD batch scripts, Compiled HTML Help (.chm) files, and Cabinet (.cab) archives for stealthy initial access. Palo Alto Networks... — Read more

Labels: Advanced WildFire CDSS NGFW
397 by JayGolf in Community Blogs

Secure Edge Simplified: Announcing Native Layer 2 Switching on Palo Alto Networks NGFWs

08-31-2026 — With the release of PAN-OS 12.2 Ceres, Palo Alto Networks introduces native Layer 2 switching on select PA-500 and PA-1500 Series NGFWs. Organizations can now consolidate their branch footprint into a single, unified device that provides full VLAN... — Read more

Labels: Branch Security Configure Next Generation Firewall Layer 2 Switching Network Architecture NGFW PA-Series PAN-OS 12.2 Secure Edge
359 by alele in Community Blogs

Network Security for the Frontier AI Era: Introducing PAN-OS 12.2 Ceres

08-14-2026 — PAN-OS 12.2 Ceres introduces 55+ innovations across AI-powered threat prevention, autonomous operations, quantum resilience, cloud, OT security, and next-generation firewall platforms. Explore what’s new and how Ceres is advancing network security... — Read more

Labels: Next-Generation Firewall NGFW PAN-OS
1960 3 by JayGolf in Community Blogs

Extending Zero-Day Browser Protection to NGFW Users with Prisma Access RBI

07-30-2026 — Modern enterprise work happens in the browser, yet traditional signature-based security often misses the latest zero-day threats. While Remote Browser Isolation (RBI) has long been a staple for mobile users, many organizations relying on Next-Gene... — Read more

Labels: NetSec NGFW Prisma SASE Remote Browser Isolation Strata Web Security
706 1 by shv in Community Blogs

Articles

Palo Alto Networks NGFW Best Practice Assessment (BPA) via the Posture API

08-10-2026 — Check out this Nominated Discussion by @JeanPaul222 (JeanPaul Mansour, Systems Engineer at Crestan International) This step-by-step implementation guide provides a practical Windows PowerShell workflow for generating an on-demand Best Practice Assessment (BPA) via the Palo Alto Networks Strata ... — Read more

Labels: NGFW
908 by JayGolf in General Articles

Use Ansible AWX to automate the Palo Alto NGFW's management and even Process/Deamon Restarts!

05-06-2026 — This article is a continuation of my previous one, 'Automating the Palo Alto NGFW's Process/Deamon Restarts'. While using TCL Expect is one of the classic methods for automating legacy devices, modern infrastructure demands more robust solutions like Ansible AWX for better scalability and managem... — Read more

Labels: Ansible API Automation CI CD Integration Cortex XSOAR cyberelite Docker Kubernetes NGFW Python Terraform
3975 5 3 by nikoolayy1 in General Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
15076 2 6 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
11650 4 3 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
18745 1 5 by JayGolf in Support FAQ