In network policy mode, you integrate a pair of firewalls in high availability (HA) into the east-west or north-south traffic by using a policy-based redirect to a single logical HA interface. The firewall and ACI fabric are configured separately and address objects on the firewall are mapped to EPGs in the ACI fabric.

You can use network policy mode to deploy a Palo Alto Networks firewall to secure east-west or north-south traffic.