Free and Premium Features
Focus
Focus

Next-Generation Firewall

Free and Premium Features

Table of Contents

Free and Premium Features

Learn what comes with your Premium
AIOps for NGFW
subscription.
This content is for the cloud management of Next-Generation Firewalls with
AIOps for NGFW
and
Strata Cloud Manager
. To get started managing Next-Generation Firewalls with
PAN-OS
, click here.
Where Can I Use This?
What Do I Need?
  • NGFW (Cloud Managed)
  • NGFW (PAN-OS or Panorama Managed)
  • VM-Series, funded with Software NGFW Credits
  • AIOps for NGFW Free (use the AIOps for NGFW Free app)
    or
  • AIOps for NGFW Premium license (use Strata Cloud Manager)
AIOps for NGFW comes in two license tiers: free and premium.
Free
AIOps for NGFW
features enrich your understanding of your firewall deployment.
Free features:
  • assess the firewall’s configuration and identify areas for improvement
  • provide easy access to runtime and historical telemetry data from firewalls
  • detect system issues (independent of the detection method)
  • reduce time to resolution through alert/notification workflows
  • provide dynamic dashboards and visualizations for several security subscriptions
With a premium tier license, you have access to both free and premium features. Premium features focus on ensuring full utilization and maximal security outcome from your firewalls.
Premium features:
  • Cloud management for NGFWs → Get started
  • use advanced ML techniques to promote an always-optimal security posture that responds to the changing threat and network landscapes, thereby reducing the attack surface
  • provide dynamic dashboards and visualizations for WildFire and IOC Search
Feature Set
Free
Premium (use Strata Cloud Manager)
Strengthen Security Posture
Partial
Yes
  • Device configuration best practices assessment
Yes
Yes
  • Recommendations for closing security gaps
Yes
Yes
  • CLI commands for remediation
Yes
Yes
  • Security Checks
Yes
Yes
  • Software Upgrade Recommendations
No
Yes
  • CDSS Adoption
Yes
Yes
  • Policy Analyzer
No
Yes
  • On-Demand BPA Report
Yes
Yes
  • AIOps Plugin for Panorama
No
Yes
  • Capacity Analyzer
No
Yes
  • NGFW SDWAN Dashboard
No
Yes
  • Compliance Summary Dashboard
Yes
Yes
Proactively Resolve Firewall Disruptions
Partial
Yes
  • Hardware alerts
Yes
Yes
  • Software and licensing alerts
Yes
Yes
  • Config limit alerts
Yes
Yes
  • Stale threat content alerts
Yes
Yes
  • Resource limit alerts
Partial (Critical system resources, such as Dataplane and Management Plane CPU/Memory)
Yes
  • Certificate Expiration Alerts
No
Yes
  • IPSec VPN Tunnel Down Health Alert
No
Yes
  • High Availability Health Alerts
Yes
Yes
  • Security Alerts for Panorama
Yes
Yes
  • PAN-OS CVEs
Yes
Yes
  • Probable Cause for Alerts
Yes
Yes
Troubleshoot with Logs
Yes
Yes
  • View, query and export logs in Log Viewer
    Check licenses and other requirements to use Log Viewer.
Yes
Yes
  • Export Metadata for Troubleshooting
Yes
Yes
  • View audit log
Yes
Yes
Optimize Your Security Investment
Partial
Yes
  • Device ranking based on health and security posture
Yes
Yes
Yes
Yes
No
Yes
No
Yes
No
Yes
Notifications
Partial
Yes
Yes
Yes
  • ServiceNow Integration
No
Yes
Engagement and Support
No
Yes
  • In-product support ticket creation capability for operational issues
    requires Platinum Tier Support on the firewall (except for Power Supply Failure alerts)
No
Yes
New capabilities in the product, across all feature categories, will be assigned to the Free and Premium tiers based solely on the discretion of Palo Alto Networks.

Recommended For You