Cloud NGFW for Azure Pricing
Table of Contents
Expand all | Collapse all
-
- About Rulestacks and Rules on Cloud NGFW for Azure
- Create a Rulestack on Cloud NGFW for Azure
- Cloud NGFW for Azure Security Rule Objects
- Create a Prefix List on Cloud NGFW for Azure
- Create an FQDN List for Cloud NGFW on Azure
- Add a Certificate to Cloud NGFW for Azure
- Create Security Rules on Cloud NGFW for Azure
- Cloud NGFW for Azure Security Services
- Enable DNS Security on Cloud NGFW for Azure
- Set Up Outbound Decryption on Cloud NGFW for Azure
- Set Up Inbound Decryption on Cloud NGFW for Azure
-
- Configure Logging for Cloud NGFW on Azure
- Cloud NGFW for Azure Traffic Log Fields
- Cloud NGFW for Azure Threat Log Fields
- Cloud NGFW for Azure Decryption Log Fields
- Enable Log Settings
- Disable Log Settings
- Enable Activity Logging on Cloud NGFW for Azure
- Multiple Logging Destinations on Cloud NGFW for Azure
- View the Logs
- View Audit Logs on a Firewall Resource
- View Audit Logs on Resource Groups
- What's New
- Cloud NGFW for Azure Known Issues
- Cloud NGFW for Azure Addressed Issues
Cloud NGFW for Azure Pricing
Cloud NGFW for Azure pricing.
Cloud NGFW is available as a pay-as-you-go (PAYG) subscription in the Azure Marketplace. With this model, you pay
only for what you use each month, and also enjoy Azure Marketplace benefits such as
consolidated billing and credit towards an organization’s Microsoft Azure Consumption
Commitment (MACC).
Cloud NGFW for Azure bills for consumption using the Azure Marketplace metering service.
The model provides pricing flexibility based on the deployment hours of all Cloud NGFWs,
the total volume of traffic processed, and which security features are in use. Billing
for the
base NGFW resource
is done using the following dimensions and units: Dimension | Price | Equivalent Cloud NGFW Credits |
---|---|---|
Base NGFW Resource Usage | $1.50 per deployment hour | 125 |
Traffic Secured (First 15TB/month) per Tenant | $0.065 per 1GB processed | 5.416666667 |
Traffic Secured (Next 15TB/month) per Tenant | $0.045 per 1GB processed | 3.75 |
Traffic Secured (Above 30TB/month) per Tenant | $0.030 per 1GB processed | 2.5 |
Add-Ons | $0.12 per 10 unit | See below for specific billing information for each add-on. |
Azure Networking charges | $0.01 per 1GB processed |
Cloud NGFW for Azure bills the Egress usage (inbound, outbound, and east-west
traffic) under Azure Networking charges dimension, and then the consumption details
are shared to the Azure Marketplace. Azure virtual network pricing determines these
charges. For more information, see Virtual Network Pricing.
Advanced Threat Protection, Advanced URL Filtering, Advanced Wildfire Add-Ons
Usage of these security services are billed using the
add-ons dimension
. Usage
is measured in $/hour and $/GB as detailed in the following table.
Traffic Secured | Price per hour | Price per GB | Equivalent Cloud NGFW Credits |
---|---|---|---|
Usage Hour | $0.450 | - | 37.5 |
First 15 TB/month | $0.020 | 1.6 | |
Next 15 TB/month | $0.014 | 1.125 | |
Above 30 TB/month | $0.009 | 0.75 |
WildFire and DNS Security Add-Ons
Usage of these security services are billed using the
add-ons dimension
. Usage
is measured in $/hour and $/GB as detailed in the following table.
Traffic Secured | Price per hour | Price per GB | Equivalent Cloud NGFW Credits |
---|---|---|---|
Usage Hour | $0.300 | - | 25 |
First 15 TB/month | $0.013 | 1.083333333 | |
Next 15 TB/month | $0.009 | 0.75 | |
Above 30 TB/month | $0.006 | 0.5 |
Panorama Centralized Management Add-On
Usage of this security service is billed using the
add-ons dimension
. Usage is
measured in $/hour and $/GB as detailed in the following table.
Traffic Secured | Price per hour | Price per GB | Equivalent Cloud NGFW Credits |
---|---|---|---|
Usage Hour | $0.300 | - | 25 |
First 15 TB/month | $0.003 | 0.2166666667 | |
Next 15 TB/month | $0.002 | 0.15 | |
Above 30 TB/month | $0.001 | 0.1 |
Overages
Overage is measured the same for $/hour and $/GB as detailed in the following table.
Overage | Price per hour | Price per GB | Equivalent Cloud NGFW Credits |
---|---|---|---|
Cloud NGFW overages | $0.012 | 1 |
Azure Networking Charges
Palo Alto Networks incurs the VNet peering costs associated with the network
interfaces used to expose the Cloud NGFW Resource in the customer's subscription.
These costs will be passed through to the customer based on the Azure virtual network peering pricing.