Strata Cloud Manager
New Strata Cloud Manager Management Features (August 2025)
Table of Contents
                    
          Expand All
          |
          Collapse All
        
        Strata Cloud Manager Docs
New Strata Cloud Manager Management Features (August 2025)
See the new configuration management features we've added to Strata Cloud Manager in
        August 2025. 
    Here's the new configuration management features we've added to Strata Cloud
            Manager in August 2025; we use a scheduled upgrade to deliver these features to you and
            they are supported with the Cloud Manager 2025.R4.0 release version. Check your Strata
            Cloud Manager in-product notifications for updates on the release upgrade schedule. You
            can verify which Strata Cloud Manager release version you're running by navigating to
            your configuration overview, and checking the
                Cloud Management Version.
    Strata Cloud Manager: Best Practice Check for GlobalProtect Portal Traffic
| 
                                 August 15, 2025 
                                Supported for: 
                             | 
The Strata Cloud Manager Best Practice Check
                now evaluates your configuration for the presence of a Vulnerability Protection
                profile that corresponds to Palo Alto Networks Best Practices for traffic destined
                to a GlobalProtect portal or gateway services when configured to allow. This is
                intended to prevent accidental deployment of security profiles that might
                inadvertently place the GlobalProtect interface at risk of attack using published
                product security vulnerabilities.
Strata Cloud Manager: Configuration Management Support by Region
August 15, 2025 Supported on:
  | 
| 
                                 Strata Cloud Manager now supports the following additional
                                        regions: 
                                
  | 
| 
                                 Strata Cloud Manager now supports the following additional
                                        regions: 
                                
  | 
Strata Cloud Manager for Configuration Management is a solution that is defined and
                controlled based on the region where it is deployed. You can deploy Strata Cloud
                Manager in the locations of your choosing, based on data location preferences and
                where you have the most users. For this reason, we are rolling out region-specific
                support for Strata Cloud Manager as soon as we are able to do so for each region.
Strata Cloud Manager: UI Enhancements
August 15, 2025 Supported on:
  | 
Strata Cloud Manager now includes several web interface
                enhancements to improve your configuration management experience. These updates
                optimize workflows and provide greater visibility into your network security
                settings.
Changes include:
- Timestamps for configuration entities: You can now see when rules were last modified with timestamps available for all configuration entities.
 
- Edit objects such as addresses directly on the Security Policy page if they're in the same scope.
 - When adding or editing rules, you can choose a higher-level location for object placement, or create new objects such as applications directly in your current scope or the application’s location.
 - Click on an application to edit it, or create a new application in a different location.
 - Visual identification has been improved with new icons for Web Security Rules, Security Rules, and Addresses.
 - A new Rule Type column shows the rule type for each policy in the Security Policy Rule page. The default is Universal. You can also select Intrazone or Interzone.
 
- On the ConfigurationNGFW and Prisma AccessOverviewConfiguration SnippetsAssociate Snippets page, you can now reorder overriding rules with drag and drop.
 - Move the global default rule, or move snippets within a rulebase using the Move option.
 - A confirmation prompt now appears before deleting a snippet, reducing the risk of accidental removals.
 
- The ObjectsApplications page now includes filters to view applications by Custom or Tagged applications.
 
Strata Cloud Manager: Support for Cross-service Configuration Sharing
August 15, 2025 Supported for:
  | 
Shared configuration management eliminates the complexity of managing security
                policies across multiple Palo Alto Networks services by allowing other Palo Alto
                Networks services to subscribe to and receive configuration
                    objects from Strata Cloud Manager. Shared configuration management allows
                you to independently implement features without introducing inconsistencies or
                delays by providing a unified way for subscribers like Prisma SD-WAN Controller or
                    Branch Sites for Prisma SD-WAN Ion devices
                to access and use Strata Cloud Manager managed NGFW and Prisma Access
                configurations.
Palo Alto Networks services can access Strata Cloud Manager configuration objects on
                a read-only basis while maintaining proper synchronization and usage tracking.
                Shared configurations enable you to share Security Profiles such as Threat
                Prevention, Anti-Spyware, Vulnerability Protection, URL Filtering, and DNS Security
                with Prisma SD-WAN Controller instances. You can track which shared objects are
                actively referenced by external services, and Strata Cloud Manager automatically
                blocks deletion of configuration objects that are currently in use by external
                subscribers to prevent configuration conflicts.
When making pushes to other services, reverting those pushes should be avoided as it
                may cause issues with your configuration.