New Features - Cloud NGFW for AWS - June 2024

Cloud NGFW for AWS now supports automated account onboarding through Terraform modules to eliminate the manual, repetitive process of onboarding individual AWS accounts. Organizations managing multi-account AWS environments face significant operational overhead when manually onboarding each account to Cloud NGFW, with the process becoming increasingly time-consuming and error-prone as environments scale to dozens or hundreds of accounts. With automated account onboarding, you can onboard multiple application accounts using a Terraform module, eliminating the need to onboard individual accounts manually and dramatically reducing deployment time for multi-account architectures.

This automation enables infrastructure-as-code approaches for Cloud NGFW deployments, allowing you to define account onboarding as part of your standard AWS account provisioning workflows. You can now scale Cloud NGFW protection across your entire AWS organization efficiently, ensuring consistent security coverage without manual intervention for each new account. The Terraform-based approach integrates with existing CI/CD pipelines and infrastructure automation tools, enabling repeatable, auditable account onboarding that maintains security standards while accelerating deployment velocity.

For more information, see Configure Automated Account Onboarding.

Cloud NGFW for AWS now offers an integrated experience for registering your Cloud NGFW tenant with the Palo Alto Networks Customer Support Portal to streamline access to technical support and reduce registration friction. Organizations deploying Cloud NGFW previously faced manual, multi-step processes to link their cloud deployments with support accounts, creating delays when urgent support was needed and increasing the likelihood of configuration errors during registration. With integrated Customer Support Portal onboarding, you receive an intuitive experience to register your Cloud NGFW tenant with the Palo Alto Networks Customer Support Portal directly from the Cloud NGFW interface, eliminating manual steps and reducing time-to-support.

This streamlined registration ensures that when you need technical assistance, your Cloud NGFW deployment is already properly associated with your support entitlements, enabling faster case creation and resolution. The integration automatically captures essential deployment information during registration, reducing the data collection burden when opening support cases and ensuring support engineers have immediate access to your environment details. This improved onboarding experience removes barriers to accessing support resources, particularly critical during initial deployments or when addressing time-sensitive security incidents.

For more information, see Register Your Cloud NGFW Tenant with a Palo Alto Networks Support Account.

You can now manage your Strata Logging Service instance with Strata Cloud Manager. The Strata Logging Service integration in Strata Cloud Manager provides a single, unified interface to manage your log data, enhances operational efficiency and compliance across your entire environment. This centralized management capability allows you to:

• Gain unified visibility and onboard firewalls, Cloud NGFW, Prisma Access, or Panorama appliances
• View the allocated log storage quota, available storage space, and the number of days logs are retained
• Centrally configure log storage quota and retention policies
• Search, filter, and export log data directly from Strata Cloud Manager
• Forward log data to external servers for long-term storage, SOC, or internal audit

This integration ensures that you can efficiently monitor your log status and manage data forwarding without switching between applications.