1. Home
    2. PAN-OS

    PAN‑OS® is the software that runs all Palo Alto Networks® next-generation firewalls. By leveraging the three key technologies that are built into PAN‑OS natively—App‑ID, Content‑ID, and User‑ID—you can have complete visibility and control of the applications in use across all users in all locations all the time. And, because the application and threat signatures automatically reprogram your firewall with the latest intelligence, you can be assured that all traffic you allow is free of known and unknown threats. 

    Getting Started

    1. Integrate the Firewall into Your Management Network
    2. Register the Firewall
    3. Activate Subscription Licenses
    4. Keep Content Up-To-Date
    5. Upgrade the Firewall to PAN-OS 9.1

    Spotlight

    Check Out the All New SD-WAN Subscription for 9.1

    Learn how you can secure your branch offices by simply enabling SD-WAN on PAN-OS 9.1.

    Get Started

    Improve your Security Posture with New App-ID Features in 9.1

    Use the new App-ID workflows to close the gaps on any application dependencies.

    Learn How

    PAN-OS 8.0 is now EOL

    PAN-OS 8.0 is EOL as of 31 October 2019 and our documentation has moved to the EOL section of the TechDocs site.

    Go to EOL Docs

    Getting Started

    1. Integrate the Firewall into Your Management Network
    2. Register the Firewall
    3. Activate Subscription Licenses
    4. Keep Content Up-To-Date
    5. Upgrade the Firewall to PAN-OS 9.1

    Documentation

    Use the PAN-OS documentation to help you get the most out of your next-generation firewalls. Whether you are just getting started and you need to learn how to integrate your firewall into the network, or you are setting up advanced features to prevent credential theft and thwart an attacker’s ability to use stolen credentials to move laterally through your network, you will find the help you need in the PAN-OS documentation.

    PAN-OS® New Features Guide

    Get started with the new features in PAN-OS 9.1! This release provides features to help you extend security into branch offices, apply security dynamically to users, and provide better visibility for mobile users connecting to your network.

    Choose Version

    PAN-OS® Administrator’s Guide

    The topics in this site provide detailed concepts and steps to help you deploy a new Palo Alto Networks next-generation firewall, including how to integrate the firewall into your network, register the firewall, activate licenses and subscriptions, and configure policy and threat prevention features. After you perform the basic configuration steps, you can use the rest of the topics in this guide to help you deploy the comprehensive security operating platform features as necessary to address your network security needs and prevent successful cyberattacks.

    Choose Version

    PAN-OS® Release Notes

    Thinking about upgrading your next-gen firewalls and Panorama to PAN-OS 9.1? Before you begin, make sure you review the release notes to learn about known issues, issues we've addressed in the release, and changes in behavior that may impact your existing deployment.

    Choose Version

    PAN-OS Web Interface Reference

    Not sure what to put in a field in the PAN-OS 9.1 Web Interface? Not sure when or why to choose one option over another? Use the topics in this site to find reference information about the PAN-OS and Panorama Web Interface.

    Choose Version

    PAN-OS CLI Quick Start

    Use the PAN-OS 9.1 CLI Quick Start to get up and running with the PAN-OS and Panorama command-line interface (CLI) quickly and easily. It includes instructions for logging in to the CLI and creating admin accounts. In addition, it provides instructions on how to find a command and how to get syntactical help and command reference information on how to use the command. This guide also provides cheat sheets with the most common CLI commands in each functional area, as well as more advance topics such as how to load a partial configuration.

    Choose Version

    PAN-OS® and Panorama™ API Guide

    Harness the PAN-OS and Panorama API to power your integration and automation needs. Use this API guide to access the XML and REST API and get familiar with the capabilities on the firewall and Panorama.

    Choose Version

    Terminal Server (TS) Agent Release Notes

    Upgrading to Terminal Services agent version 9.1? Before you begin, review the release notes to learn about the new features, known issues, and issues we've addressed in the release.

    Choose Version

    User-ID™ Agent Release Notes

    Upgrading to User-ID agent version 9.1? Before you begin, review the release notes to learn about known issues, issues we've addressed in the release, and changes in behavior that may impact your existing deployment.

    Choose Version

    Internet Gateway Best Practice Security Policy

    To protect your network from cyberattack and improve your overall security posture, implement a best practice internet gateway security policy. Use the guidelines in this site to plan, deploy, and maintain your internet gateway best practice security policy.

    Choose Version

    Data Center Best Practice Security Policy

    Your enterprise's most valuable assets reside in your data center, including proprietary source code, intellectual property, and sensitive company and customer data. Your customers and employees trust you to maintain the confidentiality and integrity of their data and expect that data to be always available, so it's important to implement a data center best practice security policy that safeguards your data and prevents successful attacks. Use the guidelines in this site to plan, deploy, and maintain your data center best practice security policy.

    Choose Version

    Decryption Best Practices

    You can't defend against threats you can’t see. By enabling decryption on your next-gen firewalls you can inspect and control SSL/TLS and SSH traffic so that you can detect and prevent threats that would otherwise remain hidden in encrypted traffic. Use the best practice guidelines in this site to learn how to plan for and deploy decryption in your organization.

    Choose Version

    DoS and Zone Protection Best Practices

    Protect against DoS attacks that try to take down your network and critical devices using a layered approach that defends your network perimeter, zones, and individual devices.

    Choose Version

    Best Practices Getting Started

    Apply security best practices to reduce the attack surface, gain visibility into traffic, prevent threats, and protect your network, users, and data.

    Choose Version

    Best Practices for Migrating to Application-Based Policy

    Choose Version

    Getting Started with the BPA

    Evaluate your Security policy, identify areas to improve, prioritize changes, and then transition safely to a best practice Security policy.

    Choose Version

    Panorama SD-WAN Plugin Help

    Choose Version

    Recommended Topics

    Best Practices for Securing Administrative Access

    Secure Access

    Best Practices for Applications and Threats Content Updates

    Apps & Threats BP

    Prevent Credential Phishing

    Learn how to prevent your users from submitting their corporate credentials to potential phishing sites.

    Prevent Phishing

    Create Best Practice Security Profiles for the Internet Gat...

    Reduce your attack surface now by attaching best practice security profiles to all of your security policy rules that allow access to web applications.

    Start Now

    Videos

    Dynamic User Groups

    SD-WAN Demo

    Policy Optimizer

    Prevention of Targeted Phishing Attacks

    Related Documents

    Best Practices

    At Palo Alto Networks, it’s our mission to develop products and services that help you, our customer, detect and prevent successful cyberattacks. We’ve developed our best practice documentation to help you do just that. Whether you’re looking for the best way to secure administrative access to your next-gen firewalls and Panorama, create best practice security policy to safely enable application access at the internet gateway and the data center, or learn the best way roll out a decryption policy to prevent threats from sneaking into your network, you will find the guidance you need here in our best practice documentation. And, our best practice library keeps growing and evolving to keep up with the ever-changing threat landscape, so be sure to check back often!

    See All Best Practices Now

    Cortex Data Lake

    Everything you need to start sending logs to Cortex Data Lake.

    Start Logging

    Firewalls & Appliances

    Palo Alto Networks® next-generation firewalls detect known and unknown threats, including in encrypted traffic, using intelligence generated across many thousands of customer deployments. That means they reduce risks and prevent a broad range of attacks. For example, they enable users to access data and applications based on business requirements as well as stop credential theft and an attacker’s ability to use stolen credentials.

    View All Firewalls & Appliances Now

    Download Enterprise SNMP MIB Files

    Get MIBs

    Translated PAN-OS Documentation

    View All Translated Documents

    Custom Application IDs and Threat Signatures

    Learn how to create custom application and threat signatures for network traffic that you want to detect, monitor, and control.

    Read Now

    Panorama

    Panorama™ provides centralized management capabilities that empower you with easy-to-implement, consolidated monitoring of your managed firewalls, Log Collectors, and WildFire appliances. With Panorama, you can centrally manage all aspects of the firewall configuration, shared policies, and generate reports on traffic patterns or security incidents — all from a single console.

    Manage at Scale

    © 2020 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo