Focus

Next-Generation Firewall



Palo Alto Networks® Next-Generation Firewalls detect known and unknown threats, including in encrypted traffic, using intelligence generated across many thousands of customer deployments. That means they reduce risks and prevent a broad range of attacks. For example, they enable users to access data and applications based on business requirements as well as stop credential theft and an attacker’s ability to use stolen credentials. 

PAN‑OS® is the software that runs all Palo Alto Networks® next-generation firewalls. By leveraging the key technologies that are built into PAN‑OS natively—App‑ID, Content‑ID, Device-ID, and User‑ID—you can have complete visibility and control of the applications in use across all users and devices in all locations all the time. And, because inline ML and the application and threat signatures automatically reprogram your firewall with the latest intelligence, you can be assured that all traffic you allow is free of known and unknown threats. 

AIOps for NGFW comes with two license tiers: Free and Premium. AIOps for NGFW analyzes device telemetry and best practice assessment results to give you a comprehensive understanding and proactive checks for your deployment health and security posture. An AIOps for NGFW Premium license, also provides you Cloud Management for NGFWs (contact your account team if you'd like to get started with Cloud Management for NGFWs).

New Homepage for PAN-OS and NGFW Docs


The Next-Generation Firewall homepage brings all your PAN-OS, Cloud Managed NGFW, and AIOps for NGFW docs together in one view. Using the new "Super ToC," you can easily switch between all available content types for NGFWs. Administration guides, networking guides, and release notes all in one place.

Compare features between versions or management system, review updates and bug fixes, or jump between content types for end-to-end workflows. 


New! PAN-OS Cosmos


The latest upgrade of our industry-leading PAN-OS® software introduces quantum security protections for VPN and enhanced logging visibility, provides additional phishing and patient zero protections, and simplifies device management. Cosmos leverages our cloud-based ML detection engines for artificial intelligence (AI) and deep learning techniques to extend and improve your security posture.

Find PAN-OS Content in Next-Generation Firewall Docs


  1. Administration Guide
  2. Networking Administration Guide
  3. Release Notes

Get Started

What's New