Cloud NGFW for Azure
What's New
Table of Contents
Expand All
|
Collapse All
Cloud NGFW for Azure Docs
What's New
Learn about new features for Cloud NGFW for Azure.
Where Can I Use This? | What Do I Need? |
---|---|
|
|
Here’s what’s new in Cloud NGFW for Azure.
- What's New in July 2025
- What's New in June 2025
- What's New in May 2025
- What's New in April 2025
- What's New in March 2025
- What's New in February 2025
- What's New in January 2025
- What's New in December 2024
- What's New in November 2024
- What's New in October 2024
- What's New in September 2024
- What's New in August 2024
- What's New in July 2024
- What's New in June 2024
- What's New in May 2024
- What's New in March 2024
- What's New in February 2024
- What's New in January 2024
- What's New in December 2023
- What's New in November 2023
- What's New in October 2023
- What's New in September 2023
- What's New in August 2023
- What's New in June 2023
- What's New in May 2023
What's New in July 2025
New | Description |
---|---|
Additional Azure Regions |
You can now deploy Cloud NGFW for Azure in the
following regions:
For more information, see Cloud NGFW for Azure
Supported Regions.
|
SNAT Port Enhancement | More SNAT ports are now allocated for each firewall instance. SNAT port allocation will scale based on the front-end IPs configured. |
What's New in June 2025
New | Description |
---|---|
Centralized Management Add-on- Strata Cloud Manager |
You can now use Strata Cloud Manager to manage security policies
in your Cloud NGFW resources. In that case, your centralized
management add-on consumption is metered on each NGFW resource
for each hour associated with a Strata Cloud Manager, as well as
for the amount of traffic processed by that NGFW resource. For
more information, see Cloud NGFW for Azure
Pricing.
|
What's New in May 2025
New | Description |
---|---|
Panorama Device license Waiver for Cloud NGFW for Azure resources |
You no longer need to pay for additional device licenses to
manage policy rules in Cloud NGFW for Azure resources. Panorama
(version 11.2.6 or above) does not count these NGFW resources
against its managed device license count.
|
What's New in April 2025
New
|
Description
|
---|---|
Cloud NGFW Credit Usage Visibility |
You can now use the Cloud NGFW Credits Management Console to gain
greater visibility into how your Cloud NGFW credits are used.
You can now analyze your usage at different periods at a summary
level for your tenant and NGFW resources. You can also analyze
your usage at a granular level for each Cloud NGFW resource, for
the traffic secured, for the Cloud-Delivered Security Services
(CDSS) and for Centralized Management (Panorama, Strata Cloud
Manager, and Strata Logging Services). For more information, see
Credit Usage
Visibility.
|
What's New in March 2025
New
|
Description
|
---|---|
Cloud NGFW Policy Management Using Strata Cloud Manager |
You can register your Cloud NGFW resources with an existing
Strata Cloud Manager, which you had previously activated based
on Prisma Access (SCM Essentials), or Strata Cloud Manager
Pro/Essential licenses. If you do not have a Strata
Cloud Manager, you can activate a new Strata Cloud
Manager Essentials (steps 1-8) to use with Cloud NGFW
for Azure. In either case, the integration automatically enables
Strata Cloud Manager Pro features for Cloud NGFW.
|
What's New in February 2025
New
|
Description
|
---|---|
Blogs, Articles, & Videos |
What's New in January 2025
New
|
Description
|
---|
What's New in December 2024
New
|
Description
|
---|---|
Strata Logging Service Support for Panorama Managed Cloud NGFW resources |
When managing Cloud NGFW resources with Panorama, you can now
stream the logs to the Strata logging service. You can then use
Strata Logging Service to perform Explore/Log Viewer queries to
view logs generated by specific Cloud NGFW for Azure
resources. When used with Cloud NGFW for Azure,
Strata Logging Service automatically scales. As traffic
throughput increases on these Cloud NGFW resources, so does your
available Strata Logging Service storage so that you don't need
to worry about making manual adjustments to storage to save your
log data. For more information, see View Traffic and Threat Logs
in Strata Logging Service.
|
Cloud NGFW Policy Management using Strata Cloud Manager |
You can now register your Cloud NGFW resource with Strata Cloud
Manager (SCM) for policy management. With this feature, you can
use a single Strata Cloud Manager (SaaS instance) to centrally
manage a shared set of security rules on Cloud NGFW resources
alongside your physical and virtual firewall appliances.
See Strata Cloud Manager Policy
Management for more information.
|
Pricing and Billing Changes |
Cloud NGFW for Azure changes the pricing structure to provide
more flexibility. See the Pricing page for more
information.
|
What's New in November 2024
New
|
Description
|
---|---|
Blogs, Articles, & Videos
|
What's New in October 2024
New
|
Descriptions
|
---|---|
Increased Support for DNAT Rules and Public IP Addresses
|
You can now configure up to 120 DNAT rules in Front-end settings
in Cloud NGFW resources. Additionally, you can associate up to
120 Public IP addresses with each Cloud NGFW resource. Refer to
the Step 3 in the documentation here.
|
Blogs, Articles, & Videos
|
What's New in September 2024
New
|
Description
|
---|---|
Cloud NGFW Certifications
|
Cloud NGFW is now a Payment Card Industry Data Security Standard
(PCI DSS) compliant service. Additionally, Cloud NGFW complies
with SOC2 HIPAA, ISO ( ISO 27001, ISO 27017, ISO 27018, ISO
27701), CSA STAR, IRAP, and Germany C5 standards. To learn more,
visit Cloud NGFW for Azure
Certifications.
|
Blogs, Articles, & Videos
|
What's New in August 2024
New
|
Description
|
---|---|
Credit Distribution and Management
|
You can now use the Cloud NGFW credits to fund both Cloud NGFW
resources in AWS and Azure and all related CDSS services you
would like to use with it. Use the credits for Panorama, Strata
Cloud Manager, or the Strata Logging Service. For more
information, see Cloud NGFW Credit Distribution
and Management.
|
Blogs, Articles, & Videos
|
Cloud NGFW Credits
Video
|
What's New in July 2024
New
|
Description
|
---|---|
Blogs, Articles, & Videos
|
What's New in June 2024
New
|
Description
|
---|---|
Additional Azure Region Support
|
Cloud NGFW for Azure is now available in the following Azure
regions:
See Supported Regions and
Zones for the complete list of supported
regions.
|
What's New in May 2024
New
|
Description
|
---|---|
Use XFF Header Value to Enforce Security Policy
|
Your Cloud NGFW for Azure can now use an IP address in an
X-Forwarded-For (XFF) header to enforce security
policy created on Panorama.
|
Additional Azure Region Support
|
Cloud NGFW for Azure is now available in the following Azure
regions:
See Supported Regions and
Zones for the complete list of supported regions.
|
Credit Consumption and Usage Visibility
| You can now use credits for Cloud NGFW consumption for long-term contracts which you allocate for your firewall resources across Azure cloud environments at tenant level. For more information, see Credit Usage Visibility. |
What's New in March 2024
New
|
Description
|
---|---|
Additional Azure Region Support
|
Cloud NGFW for Azure is now available in the following Azure
regions:
See Supported Regions and
Zones for the complete list of supported regions.
|
Azure Networking Charges
|
Cloud NGFW for Azure bills virtual network peering charges under
the Azure Networking charges dimension. The consumption details
are shared to the Azure Marketplace. Usage is tracked for
inbound (from Internet to VNET), outbound (to Internet from
VNET) and east-west traffic (across VNETs). For more information
on the charges, see the Pricing page.
|
Support for Inbound Decryption
| Cloud NGFW for Azure uses SSL Inbound Decryption to inspect and decrypt inbound SSL/TLS traffic from a client to a targeted network server and block suspicious sessions. |
What's New in February 2024
New
|
Description
|
---|---|
Multiple Log Destinations
| You can now send logs from your Panorama-managed Cloud NGFW for Azure resource to Azure Log Analytics Workspace, Syslog Servers, and Panorama. See Multiple Log Destinations on Cloud NGFW for Azure more information. |
Additional Azure Region Support
| Cloud NGFW for Azure is now available in the
following Azure regions:
See Supported Regions and
Zones for the complete list of supported
regions. |
What's New in January 2024
New
|
Description
|
---|---|
Support for 100Gbps
| This release enables the Cloud NGFW for Azure to automatically scale up to 100Gbps for both vNET and vWAN deployments. See Deploy the Cloud NGFW in a vNET and Deploy the Cloud NGFW in a vWAN for more information. |
What's New in December 2023
New
|
Description
|
---|---|
Additional Azure Region Support
| Cloud NGFW for Azure is now available in the
following Azure regions:
See Supported Regions and
Zones for the complete list of supported
regions. |
Support for Private Source NAT
| This release adds support for Private Source NAT. With this support, you can create a Private NAT gateway to perform network address translation (NAT). |
What’s New in November 2023
New
|
Description
|
---|---|
Additional Azure Region Support
| Cloud NGFW for Azure is now available in the
following Azure regions:
See Supported Regions and
Zones for the complete list of supported
regions. |
Rulestack enhancements
| This release supports implicit rule deletions in a
rulestack. With this enhancement:
This deletion functionality applies
to uncommitted and running non-empty rulestacks. |
Support for DNS Security Service
| Cloud NGFW for Azure adds support for the Palo Alto Networks DNS Security service. This service allows you to protect vNET and vWAN traffic from advanced DNS-based threats by monitoring and controlling the domains that your network resources query. For more information, see Enable DNS Security on Cloud NGFW for Azure. |
Support for Non-RFC 1918
| This release adds support for additional private IP ranges besides those addresses specified in RFC 1918 for vNET and vWAN deployments. With this support, you can use public IP address blocks (for example, 40.0.0.0/24) as your private network without routing the traffic to the internet. For more information about this feature in vNET deployments, see the information provided in the Networking Section (step 5) Additional Prefixes to Private Traffic Range. |
What’s New in October 2023
New
|
Description
| ||||||||
---|---|---|---|---|---|---|---|---|---|
Additional Azure Region Support
| Cloud NGFW for Azure is now available in the
following Azure regions:
See Supported Regions and
Zones for the complete list of supported
regions. | ||||||||
Programmatic Access
| Programmatic access allows you to create and manage
NGFWs and rulestacks using APIs. Using these APIs, you can invoke
actions on Cloud NGFW resources through an application or
third-party tool. The table below provides information about
supported tools:
|
What’s New in September 2023
New
|
Description
| ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Integrate SSO login flow with your Support Portal account
| Integrate your organization’s SSO login flow with your Palo Alto Networks Customer Support Portal account for your Cloud NGFW for Azure subscription. | ||||||||||||
Support for public domain email addresses
| This release adds support for public domain email
addresses for Customer Support Portal
accounts. Previously, users who managed Cloud NGFW assets and
related support cases needed a corporate email address to log into
the account. With this added functionality:
|
What’s New in August 2023
New
|
Description
|
---|---|
General availability
|
Cloud NGFW for Azure has reached general availability. This
release includes numerous fixes, support for additional regions,
and enhancements to the pay-as-you-go (PAYG) subscription
model.
|
What’s New in June 2023
New
|
Description
|
---|---|
Health Monitoring
|
View the overall health status of the Cloud NGFW firewall,
connection status, and diagnostic information. Use this
information to determine the cause of an unhealthy firewall
state. See Monitor Cloud NGFW
Health for more information.
|
What’s New in May 2023
New
|
Description
|
---|---|
Initial release of Cloud NGFW for Azure
|
The initial release of Cloud NGFW for Azure includes the
following features:
|