license (does not include cloud
management for NGFWs)
AIOps for NGFW comes in two license tiers:
free and premium.
Free
AIOps for NGFW
features enrich
your understanding of your firewall deployment.
Free features:
assess
the firewall’s configuration and identify areas for improvement
provide easy access to runtime and
historical telemetry data from firewalls
detect system issues (independent
of the detection method)
reduce time to resolution through
alert/notification workflows
provide dynamic dashboards and visualizations
for several security subscriptions
With a premium tier license, you have access to both
free and premium features. Premium features focus on ensuring full
utilization and maximal security outcome from your firewalls.
use advanced
ML techniques to promote an always-optimal security posture that
responds to the changing threat and network landscapes, thereby
reducing the attack surface
provide dynamic
dashboards and visualizations for WildFire and IOC Search
Premium instances have a label under the application name in the UI.
Feature Set
Free
Premium
Strengthen Security Posture
Partial
Yes
Device configuration best practices assessment
Yes
Yes
Recommendations for closing security gaps
Yes
Yes
CLI commands for remediation
Yes
Yes
Security Checks
Yes
Yes
Software Upgrade Recommendations
No
Yes
Security Subscriptions
Yes
Yes
Policy Analyzer
No
Yes
On-Demand BPA Report
Yes
Yes
AIOps Plugin for Panorama
No
Yes
Capacity Analyzer
Yes
Yes
NGFW SDWAN Dashboard
Yes
Yes
Compliance Summary Dashboard
Yes
Yes
Proactively Resolve Firewall Disruptions
Partial
Yes
Hardware alerts
Yes
Yes
Software and licensing alerts
Yes
Yes
Config limit alerts
Yes
Yes
Stale threat
content alerts
Yes
Yes
Resource limit
alerts
Partial (Critical system resources, such as Dataplane
and Management Plane CPU/Memory)
Yes
Certificate Expiration Alerts
No
Yes
IPSec VPN Tunnel Down Health Alert
No
Yes
High Availability Health Alerts
Yes
Yes
Security Alerts for Panorama
Yes
Yes
Security Advisory Summary
Yes
Yes
Troubleshoot with Logs
Yes
Yes
View, query and
export logs in Log Viewer
Check licenses and other
requirements to use Log Viewer.
Yes
Yes
Export Metadata for Troubleshooting
Yes
Yes
View audit log
Yes
Yes
Optimize Your Security Investment
Partial
Yes
Device ranking
based on health and security posture
In-product support
ticket creation capability for operational issues
requires Platinum Tier Support on the
firewall (except for Power Supply Failure alerts)
No
Yes
New capabilities in the product, across all feature
categories, will be assigned to the Free and Premium tiers based
solely on the discretion of Palo Alto Networks.
