WildFire FedRAMP-Authorized Cloud Platforms
Where Can I Use This? | What Do I Need? |
Prisma Access (Managed by Strata Cloud Manager)
Prisma Access (Managed by Panorama)
NGFW (Managed by Strata Cloud Manager)
NGFW (Managed by PAN-OS or Panorama)
|
Advanced WildFire License For Prisma Access , this is usually included with your
Prisma Access license.
Advanced WildFire FedRAMP Add-on
|
In addition to the
WildFire Global cloud,
private
cloud, and
hybrid cloud deployment options, Palo Alto
Networks also provides access to several high-security, FedRAMP-authorized cloud
environments for organizations that need to comply with secure cloud operational
standards. FedRAMP-authorized clouds are available in two impact levels: High and
moderate, with moderate being available in two cloud configurations. The Advanced
WildFire Government Cloud complies to the FedRAMP high certification standard, while the
Advanced WildFire Government Cloud and WildFire U.S. Government Cloud complies to the
FedRAMP moderate certification standard.
The
WildFire U.S. Government Cloud (which
complies to FedRAMP moderate certification standards) is planned for
decommissioning. For all new customers, Palo Alto Networks recommends using the
Advanced WildFire Public Sector cloud, which has an enhanced feature set and support
for the Advanced WildFire Cloud.
The FedRAMP moderate clouds (Advanced WildFire Government Cloud and WildFire U.S.
Government Cloud) are generally available to Palo Alto Networks customers, however, the
Advanced WildFire Government Cloud, which complies to FedRAMP high certification
standards, is only available to Federal, Department of Defense, or Approved Defense
Industrial Base (DIB) customers.
Due to the sensitive nature of these services, FedRAMP clouds have a specific onboarding
process that differs from that of other services. For more information, refer to the
specific FedRAMP cloud type:
The FedRAMP clouds listed above cannot be mixed and matched on the same device, nor can
they be used concurrently with the Advanced WildFire global or regional clouds. However,
any FedRAMP cloud can be used in cooperation with other cloud-based security services
(eg. Advanced Threat Prevention, DLP, etc). If you need to incorporate multiple FedRAMP
security levels on a single device, you must use separate account IDs. After onboarding
is complete, you can reference the FedRAMP cloud URL in your Antivirus security profile
and APIs in the same manner as any other Advanced WildFire cloud.
