>
    Introducing Cloud NGFW for Azure
    Focus
    Download PDF
    Focus
    1. Home
    2. Cloud NGFW for Azure Getting Started
    3. Introducing Cloud NGFW for Azure
    Download PDF
    Cloud NGFW for Azure

    Introducing Cloud NGFW for Azure

    Table of Contents

    Introducing Cloud NGFW for Azure

    Learn about the Cloud NGFW for Azure.
    Where Can I Use This?What Do I Need?
    • Cloud NGFW for Azure
    • Cloud NGFW subscription
    • Palo Alto Networks Customer Support Portal account
    • Azure Marketplace subscription
    Cloud Next-Generation Firewall by Palo Alto Networks - an Azure Native ISV Service - is Palo Alto Networks Next-Generation Firewall (NGFW) delivered as a cloud-native service on Azure. With Cloud NGFW, you can access the core NGFW capabilities such as App-ID, URL filtering based on URL categories and geolocations, SSL/TLS decryption, etc. It provides threat prevention and detection through cloud-delivered security services and threat prevention signatures. You can discover Cloud NGFW in the Azure Portal.

    Cloud NGFW Components

    Cloud NGFW for Azure creates a number of components that work together to secure your Azure environment.
    • The Cloud NGFW tenant is an instantiation of the Cloud NGFW service associated with your Azure account when one of your Azure users subscribes to the service. Cloud NGFW designates you, the subscribing Azure user, as the administrator of a Cloud NGFW tenant. Based on the assigned role, other users can create Cloud NGFW resources and configure rulestacks with the tenant.
    • The Cloud NGFW Resource (or simply NGFW) is associated with your Azure subscription and can span multiple availability zones. This resource has built-in resiliency, scalability, and lifecycle management.
    • Rulestacks define the NGFW traffic filtering behavior such as advanced access control (App-ID, URL Filtering) and threat prevention. A rulestack includes a set of security rules and the associated objects and Security Profiles. To use a rulestack, you associate the rulestack with one or more NGFW resources.
      Cloud NGFW supports a local rulestack. Local account administrators can associate a local rulestack with an NGFW in their AWS account. A local rulestack includes local rules.

    © 2025 Palo Alto Networks, Inc. All rights reserved.