Cloud NGFW for Azure
    : Cloud NGFW for Azure Pricing
    Focus
    Download PDF
    Focus
    1. Home
    2. Azure
    3. Cloud NGFW for Azure
    4. Getting Started with Cloud NGFW for Azure
    5. Cloud NGFW for Azure Pricing
    Download PDF

    Cloud NGFW for Azure

    Cloud NGFW for Azure Pricing

    Table of Contents

    Cloud NGFW for Azure Pricing

    Cloud NGFW for Azure pricing.
    Cloud NGFW is available as a pay-as-you-go (PAYG) subscription in the Azure Marketplace. With this model, you pay only for what you use each month, and also enjoy Azure Marketplace benefits such as consolidated billing and credit towards an organization’s Microsoft Azure Consumption Commitment (MACC).
    Cloud NGFW for Azure bills for consumption using the Azure Marketplace metering service. The model provides pricing flexibility based on the deployment hours of all Cloud NGFWs, the total volume of traffic processed, and which security features are in use. Billing for the base NGFW resource is done using the following dimensions and units:
    Dimension
    Price
    		Equivalent Cloud NGFW Credits
    Base NGFW Resource Usage
    $1.50 per deployment hour
    		125
    Traffic Secured (First 15TB/month) per Tenant
    $0.065 per 1GB processed
    		5.416666667
    Traffic Secured (Next 15TB/month) per Tenant
    $0.045 per 1GB processed
    		3.75
    Traffic Secured (Above 30TB/month) per Tenant
    $0.030 per 1GB processed
    		2.5
    Add-Ons
    $0.12 per 10 unit
    		See below for specific billing information for each add-on.
    Azure Networking charges
    $0.01 per 1GB processed
    Cloud NGFW for Azure bills the Egress usage (inbound, outbound, and east-west traffic) under Azure Networking charges dimension, and then the consumption details are shared to the Azure Marketplace. Azure virtual network pricing determines these charges. For more information, see Virtual Network Pricing.

    Advanced Threat Protection, Advanced URL Filtering, Advanced Wildfire Add-Ons

    Usage of these security services are billed using the add-ons dimension. Usage is measured in $/hour and $/GB as detailed in the following table.
    Traffic Secured
    Price per hour
    		Price per GBEquivalent Cloud NGFW Credits
    Usage Hour$0.450-37.5
    First 15 TB/month
    		$0.0201.6
    Next 15 TB/month
    		$0.0141.125
    Above 30 TB/month
    		$0.0090.75

    WildFire and DNS Security Add-Ons

    Usage of these security services are billed using the add-ons dimension. Usage is measured in $/hour and $/GB as detailed in the following table.
    Traffic Secured
    Price per hour
    		Price per GBEquivalent Cloud NGFW Credits
    Usage Hour$0.300-25
    First 15 TB/month
    		$0.0131.083333333
    Next 15 TB/month
    		$0.0090.75
    Above 30 TB/month
    		$0.0060.5

    Panorama Centralized Management Add-On

    Usage of this security service is billed using the add-ons dimension. Usage is measured in $/hour and $/GB as detailed in the following table.
    Traffic Secured
    Price per hour
    		Price per GBEquivalent Cloud NGFW Credits
    Usage Hour$0.300-25
    First 15 TB/month
    		$0.0030.2166666667
    Next 15 TB/month
    		$0.0020.15
    Above 30 TB/month
    		$0.0010.1

    Azure Networking Charges

    Palo Alto Networks incurs the VNet peering costs associated with the network interfaces used to expose the Cloud NGFW Resource in the customer's subscription. These costs will be passed through to the customer based on the Azure virtual network peering pricing.

    Credit Consumption and Usage Visibility

    You can now use NGFW credits for Cloud NGFW consumption for long-term contracts which you can allocate for your firewall resources across Azure cloud environments at the tenant level. You can purchase your Cloud NGFW credits through the standard Palo Alto Networks sales channels and processes.
    You will need a PAYG subscription to subscribe to credits. Reach out to your sales team for more details.
    Consider the following:
    • The credit pool has a start time and end time. The unit of the value is credit/hour (also known as capacity).
    • Capacity is calculated based on the combination of Services and the amount of traffic being processed over time (for example: per hour).
    • To estimate the required credit for Cloud NGFW Firewall in Azure, use the Cloud NGFW for Azure pricing estimator. The estimator will provide the number of credits required for the amount of resources, services and traffic entered. The credit to dollar amount will also be displayed.
    • Once the credits are purchased and claimed, it will be added to the Azure account at a tenant level:
      • All the resources deployed within the tenant will consume the credits from the same pool.
      • If the usage exceeds the amount of credit allocated, the overage will be charged as the PAYG (default payment method).
      • These charges will be reflected as a Marketplace partner charge on the Azure monthly bill.
    If you have signed up for x capacity, then x * 24 (hours) * 30 (number of days in a month) number of credits will be added to your account every month in your credit bucket. The credits are deducted from the credit bucket as per your usage for the month until the end date of the contract. You can increase the capacity of credits through your sales channel. After expiry of the credits, you can renew the credits for different capacity and end date.
    How to Claim Credits
    You will need a Cloud NGFW Product serial number and CSP (Palo Alto Network’s Customer Support Portal) support account ID to claim the credits. The Cloud NGFW Product serial number can be generated via two methods:
    • Create a firewall.
    • Create a rulestack.
    You can then create a new CSP serial account using the Product Serial Number (CSP serial number of the tenant) or link an existing CSP account using the Register your Azure tenant to a new or existing Palo Alto Networks support account link in the New Support Request section.
    After you register a tenant, you can use it for 30 days as a free trial. If you have utilized the free credits before the completion of 30 days free trial, additional usage will be charged at PAYG rates.
    If you add Cloud NGFW credits during a free-trial period, your contract starts immediately and overrides the free trial.
    You can verify your credit usage information in the New Support request section in Azure Marketplace.
    If your average consumption per month exceeds the purchased credits, overages are charged at PAYG rates.
    Credits are reset on the first day of each month. If your credits expire, your account rolls back to PAYG rates. Unused credits are not rolled over to the next month. Use the Cloud NGFW for Azure pricing estimator to help you determine Azure pricing for your Cloud NGFW tenant.

    © 2024 Palo Alto Networks, Inc. All rights reserved.