You can use
Quantum-Safe Cipher Translation on your
Palo Alto Networks Next-Generation Firewall to protect your organization against
emerging quantum computing threats while maintaining compatibility with existing
applications that use classical encryption. This feature addresses the critical
challenge organizations face when upgrading numerous internal and custom
applications to post-quantum cryptography, a process that is often time-consuming or
impractical due to outdated codebases, resource constraints, or lack of specialized
expertise. Your NGFW functions as a translation proxy, terminating quantum-safe
connections from modern clients and establishing new connections to your internal
applications using the classical encryption methods they currently support. This
transparent translation allows you to implement quantum-safe security for external
communications while avoiding the immediate need to modify or replace legacy systems
that cannot yet support post-quantum cryptography algorithms. You can configure this
capability through decryption profiles on your NGFW, selecting from PQC-Standard
algorithms like ML-KEM and Kyber, or PQC-Experimental options including Frodo, Bike,
and HQC key exchange mechanisms. By implementing Quantum-Safe Cipher Translation,
you can future-proof your network security infrastructure and ensure business
continuity while gradually transitioning to fully quantum-resistant systems at your
own pace.