Visibility and Control

Our next-generation firewall classifies all traffic, including encrypted traffic, based on application, application function, user and content. You can create comprehensive, precise security policies, resulting in safe enablement of applications. This lets only authorized users run sanctioned applications, greatly reducing the surface area of cyber attacks across the organization.

Threat Prevention

The combination of Content-IDTM and WildFireTM provides protection from known and unknown threats. Content-ID limits unauthorized data transfer and detects and blocks a wide range of threats. WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs) through static and dynamic analysis in a scalable, virtual environment, and automatically disseminates updated protections globally in near-real time.

Built-in, not Bolted-on

Today’s security architectures are a result of adding uncoordinated security layers one at a time, making them ineffective in dealing with modern threats. Unlike legacy firewalls that are based on this "layered security" architecture, our next-generation firewalls use a unified security design that classifies all traffic into full context before applying one set of flexible security rules in a single pass.

 

 

Palo Alto Networks next-generation firewalls are architected to safely enable applications and prevent modern threats. Our approach identifies all network traffic based on applications, users, content and devices, and lets you express your business policies in the form of easy-to-understand security rules.

Flexible deployment options and native integration with our next-generation platform extend the policy enforcement and cyberthreat prevention to everywhere your users and data are located: in your network, on your endpoints and in the cloud.

 

Superior architecture, superior benefits

  • Complete visibility and precise control: Our next-generation firewalls provide complete visibility into all network traffic based on applications, users, content and devices.
  • Automated security: Innovative features reduce manual tasks and enhance your security posture, for example, by disseminating protections from previously unknown threats globally in near-real time, correlating a series of related threat events to indicate a likely attack on your network, and using dynamic address groups in security rules to avoid updating server IP addresses frequently.
  • Protection for your users and data everywhere: Our next-generation firewalls are natively integrated with our security platform, which prevents advanced and unknown cyberthreats no matter where the users and data are located: in your network, on your endpoints and in the cloud.

 

Get Started

Put yourself in the driver's seat and receive a FREE two-hour hands-on experience on the Palo Alto Networks next-generation firewall with the Virtual Ultimate Test Drive.

Next, request your Security Lifecycle Review (SLR). The SLR examines your network traffic and generates a comprehensive report unique to your organization. You’ll discover the applications and threats exposing vulnerabilities in your security posture.






 

Product Summary Specsheet

Key features, performance capacities and specifications for all Palo Alto Networks firewalls.

  • 32
  • 72228

PA-3000 Series Specsheet

Key features, performance capacities and specifications for our PA-3000 Series.

  • 11
  • 43628

Firewall Feature Overview Datasheet

This eight-page datasheet provides a comprehensive overview of the critical PAN-OS features that power all next-generation firewalls from Palo Alto Networks. This datasheet is available in Chinese Simplified, Chinese Traditional, German, Italian, Portuguese, Spanish, Russian, and Turkish.

  • 8
  • 36275

PA-5000 Series Specsheet

Key features, performance capacities and specifications for our PA-5000 Series.

  • 2
  • 29793

PA-500 Specsheet

Key features, performance capacities and specifications for our PA-500.

  • 7
  • 33380

PA-7000 Series Specsheet

Key features, performance capacities and specifications for our PA-7000 Series.

Palo Alto Networks, Santa Clara, CA
  • 13
  • 29228