Cloud NGFW for AWS offers multiple options for deploying NGFW resources and managing Security policy rules.

Unlike traditional virtual firewall appliances that must be manually deployed and managed on virtual machines, a Cloud NGFW is a fully managed service. This approach simplifies deployment, automates scaling, and provides seamless integration with your cloud network. You can deploy Cloud NGFW resources from the dedicated Cloud NGFW tenant console, which you access after subscribing to the service through the AWS Marketplace.

You can perform end-to-end configuration within the Cloud NGFW console, from instantiating the firewall resource to registering with Panorama or Strata Cloud Manager and streaming logs and metrics to AWS destinations such as Amazon CloudWatch.