Integrate into any architecture with flexible networking architecture.

L2/L3 networking: An L2/L3 architecture that leverages zone-based security enforcement, enables deployment in switched and routed environments.

Dynamic routing: Support for OSPF, RIP and BGP combined with full 802.1Q VLAN support is provided for both layer 2 and layer 3 deployments, so that all services can be enabled while seamlessly integrating with the existing routing or VLAN architecture.

Virtual Wire: Virtual Wire provides organizations with a true transparent mode by logically binding two ports together and passing all traffic to the other port without any switching or routing. Full inspection and control for all traffic is enabled with no impact on the surrounding devices and no networking protocol configuration. Multiple Virtual Wire pairs can be configured to support multiple network segments.

Multicast

Multicast support has been extended beyond identification and control of multicast traffic to now include the ability to participate in multicast routing and group management through PIM-SM, PIM-SSM and IGMP support.

Identification and inspection of applications using IPv6.

Organizations who are beginning to investigate or migrate to an IPv6 infrastructure can deploy Palo Alto Networks next-generation firewalls in virtual wire, layer 2, or layer 3 mode and then apply many of the same firewall features to that traffic that can be applied to IPv4 traffic. IPv6-based applications and content can be classified, controlled, inspected, monitored and logged with full visibility.