New Features - Cloud NGFW for AWS - November 2025

Cloud NGFW for AWS simplifies Strata Logging Service integration for Panorama-managed resources to address the complexity of separately procuring and configuring cloud logging services. Organizations managing Cloud NGFW through Panorama previously faced administrative overhead and additional costs when attempting to enable centralized cloud logging, often requiring separate licensing discussions and complex integration procedures. With improved linking, you no longer need to procure Strata Logging Service separately for your Panorama-managed Cloud NGFW resources—you simply associate your Panorama with an existing Strata Tenant (TSG) that you previously activated based on your Strata Cloud Manager Pro/Essential licenses, or activate a new Strata Cloud Manager Essentials and associate your Panorama with it.

When you link Cloud NGFW to a Panorama previously associated with a Strata tenant, the integration automatically enables Strata Logging Service and Strata Cloud Manager Pro features for Cloud NGFW without additional procurement steps. The linking process now validates whether your Panorama is associated with a Strata tenant and automatically enables the SLS configurations, eliminating manual configuration errors and reducing setup time from hours to minutes. This streamlined approach ensures that log data flows automatically to your centralized Strata Logging Service instance, providing immediate visibility into Cloud NGFW activity alongside your other security infrastructure.

For more information, see Panorama Policy Management.

Cloud NGFW for AWS now offers Try and Buy functionality natively in Strata Cloud Manager to eliminate the complex multi-step onboarding process that previously created barriers to evaluation and adoption. Organizations evaluating Cloud NGFW for AWS previously faced substantial friction requiring AWS Marketplace subscriptions, AWS admin credentials, cross-account IAM permissions setup, new user identity creation, and navigation across multiple consoles to create firewalls, endpoints, and policies. With native Try and Buy in Strata Cloud Manager, you can now evaluate, deploy, operate, and manage billing for Cloud NGFW for AWS entirely within a single SCM console, drastically simplifying the entire lifecycle from initial trial through production deployment.

This streamlined experience allows you to start protecting AWS workloads in minutes rather than hours or days, removing technical barriers that previously prevented security teams from quickly evaluating the solution. You can now provision Cloud NGFW resources, configure security policies, monitor traffic, and manage costs from the same interface you use for other Palo Alto Networks security services. The unified billing and management eliminate the need to context-switch between AWS Console, AWS Marketplace, and separate management interfaces, providing a cohesive experience that accelerates time-to-value.

For more information, see Getting Started from Strata Cloud Manager.