Focus

Cloud NGFW for AWS

Supported Cloud NGFW Management and Deployment Features

Table of Contents

Cloud NGFW Resource and NGFW Endpoints

Supported Security Policy Management Features

The Palo Alto Networks Cloud NGFW for AWS supports the following management and deployment features.

Where Can I Use This?	What Do I Need?
Cloud NGFW for AWS	Cloud NGFW subscription Palo Alto Networks Customer Support Account (CSP) AWS Marketplace account User role (either tenant or administrator)

The Palo Alto Networks Cloud NGFW for AWS supports the following management and deployment features.

NGFW Deployment & Management	Description	Native NGFW Deployment	AWS Firewall Manager Deployment
Tools	You have multiple configuration options to deploy and manage Cloud NGFW resources.	Cloud NGFW Console Cloud NGFW APIs Cloud Formation Terraform	AWS Console AWS APIs Cloud Formation
AWS Regions	Cloud NGFW for AWS is an AWS regional service. The Cloud NGFWs you deploy protects your VPC Ingress and Egress traffic in that AWS region.	21	16
Deployment Architectures	There are multiple deployment models available with Cloud NGFW for AWS. The right model depends on the use case and requirements.	Centralized Distributed Combined (Multi-VPC NGFW resource)	Centralized Model Distributed Model

Cloud NGFW Resource and NGFW Endpoints

Supported Security Policy Management Features

© 2025 Palo Alto Networks, Inc. All rights reserved.

xThanks for visiting https://docs.paloaltonetworks.com. To improve your experience when accessing content across our site, please add the domain to the allow list on your ad blocker application.