Cloud NGFW for Azure - Forced Tunneling

Cloud NGFW for Azure Cloud NGFW automatically provides source NAT (SNAT) for all outbound traffic to public IP addresses you associate with it. Cloud NGFW doesn’t SNAT when the destination IP address is a private IP address range per IANA RFC 1918. By default, outbound internet traffic will be handled by Cloud NGFW, as mentioned below T...

Simplified onboarding of CNGFW from AWS Marketplace

This video provides a visual guide of new simplified onboarding experience of Cloud NGFW from AWS Marketplace.With this simplified onboarding, customers no longer need to upfront grant IAM permissions or configure accounts to create and start using the Cloud NGFW to protect their AWS workloads.

Seamlessly migrate VNET Traffic from Azure Firewall to Palo Alto Networks Cloud NGFW

This article explains how to migrate VNET traffic from being inspected by Azure Firewall to the Cloud NGFW by Palo Alto Networks without disrupting communications across production applications. Problem Description:As organizations expand their cloud infrastructure, security requirements inevitably become more sophisticated. While many enterpri...

MDM Posture Checks for Prisma Access Agent

MDM Posture Checks for Prisma Access Agent Organizations that manage device compliance through a mobile device management (MDM) solution such as Microsoft Intune or Jamf can now use that compliance status to control whether the Prisma® Access Agent is authorized to establish a tunnel to Prisma Access.When a device is not enrolled in or is out ...

Cloud Firewall Policy Migration Tool

This video provides a demonstration of the Cloud-Native Firewall Policy Migration Tool, which is available in Strata Cloud Manager (SCM) to help enterprise customers migrate policies to Palo Alto Networks next-generation firewalls.

Host Compliance Service for GlobalProtect

This video introduces the Host Compliance Service (HCS) feature for GlobalProtect, covering its overview, configuration, troubleshooting, and upgrade migration.Host Compliance Service (HCS) for GlobalProtect is a cloud-hosted, highly available, and distributed service designed to centralize endpoint posture assessment, distribution, and security...

Securing the Front Door: How to Protect Ingress Traffic with Cloud NGFW for AWS

Introduction Public-facing applications are frequent targets for varied cyber threats. Because threat actors often embed malicious payloads within valid HTTPS traffic, traditional Layer 3 and Layer 4 controls are often insufficient for protecting the network edge. Previously, securing ingress traffic required deploying and managing fleets of...

New Deployment Model: Integrating Cloud NGFW for AWS with Regional NAT Gateway

AWS recently launched the Regional NAT Gateway, an option that simplifies outbound traffic handling in Virtual Private Clouds (VPCs). For customers using Cloud NGFW for AWS, this feature reduces architectural overhead, increases resiliency, and maintains a strong security posture for egress traffic. This post details how Cloud NGFW uses the Re...

Cloud NGFW for AWS (SCM Try and Buy): Deployment Guide with Terraform

Introduction: Cloud NGFW for AWS is a fully managed, cloud-native firewall service delivered by Palo Alto Networks and natively integrated with Amazon Web Services. It combines the power of Palo Alto Networks’ industry-leading threat prevention technologies with the simplicity and scalability of an AWS-managed service. Built on machine learn...

Scaling Secure Outbound Traffic with Cloud NGFW for Azure and Zone Redundant Azure NAT Gateway

As organizations continue to expand their workloads in Azure, outbound connectivity has become a key part of maintaining both performance and security. Many applications rely on large volumes of outbound connections—whether reaching external APIs, SaaS platforms, update services, or partner systems. As these environments grow, managing those out...

Azure NAT Gateway Integration with Cloud NGFW

Learn how Cloud NGFW for Azure now integrates with Azure NAT Gateway to deliver scalable outbound connectivity and advanced security inspection. This video walks through the architecture, key benefits, and how the two services work together to provide secure, high-performance egress.

Use onprem hosted EDL from AWS CNGFW

Is it somehow possible to load an EDL from a server located in onprem network (not reachable from Internet)? From which interface / IP address does the AWS CNGFW tries to connect to EDL server? Can it make connection from an interface / IP address located in customer VPC? Could not find any documentation for this specific topic.

Memory Management Best Practices for ION1000, ION2000, ION1200 Platforms

This article provides guidance to customers with lower end ION Platform (ION1000, ION2000, ION1200) for memory management considerations prior to upgrading ION software. 1. Introduction: Understanding Memory Considerations for ION Platforms Lower end ION Platforms (ION1000, ION2000, ION1200) which are running ION Element SW series 5.x and c...

USER ID -cloud NGFW Azure

Hi , Any one enable USER ID on cloud NGFW on azure and working smoothly in there environment? We tried POC in our environment but we are observing intermittent discussion between Palolo agent and Cloud NGFW azure which affecting its integration. We already opened TAC case but havent seen positive progress Thanks Sanil Hande

AI Access Security Innovations