[![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/igw/ngfw-for-aws-azure/images/panw-logo.svg)](https://www.paloaltonetworks.com/) # Cloud NGFW Credit Estimator ## (For Cloud NGFW for AWS and Cloud NGFW for Azure) Select AWS or Azure **AWS\*\*\*\*AWS** **Azure\*\*\*\*Azure** Select Credit Type Close **Software NGFW Credits vs. Legacy Credits** Palo Alto Networks has transitioned to a unified credit system to streamline resource management. While Legacy Cloud NGFW Credits map at a direct 1:1 ratio to your firewall usage, the new unified Software NGFW Credits operate on a different conversion ratio that dynamically accounts for both base usage and support tier overhead. This unified system consolidates your purchasing into a single, highly flexible pool, allowing you to seamlessly share capacity across self-managed virtual firewalls (VM-Series) and cloud-managed Cloud NGFW services as your deployment needs evolve. Note: Legacy Cloud NGFW credits are still available to view and estimate in the calculator as needed. **Software NGFW (VM-Flex)****Software NGFW (VM-Flex)****Cloud NGFW (Legacy)****Cloud NGFW (Legacy)** Select SKU Tier Close Our AWS offerings utilize structured SKUs to seamlessly handle scale-heavy security topologies and support next-generation defenses: **Standard vs. Base SKUs:** Both the Standard and Base SKUs feature the exact same pricing. However, we highly recommend utilizing the Standard SKU for your deployments, as it is designed to offer greater flexibility and support for new capabilities moving forward. **Premium SKU:** Designed to provide enhanced capacity for the most demanding throughput requirements and complex security architectures. **Optimized for Advanced AI Defenses:** The Standard and Premium tiers are purpose-built to support our most robust AI-driven security add-ons, including Advanced WildFire (leveraging Precision AI to block zero-day malware) and Advanced DNS Security (stopping evasive shadow domains). \*\*Base/Standard****Premium** Base/Standard: $1.50/hr | Premium: $3.00/hr Select SKU Tier Close Cloud NGFW for Azure offers two streamlined SKUs to accommodate different deployment sizes: **Standard Instance:** The foundational tier recommended for cloud-native environments requiring standard policy sets. It includes standard autoscaling to efficiently manage peak traffic up to 100 Gbps. **Premium Instance:** Ideal for securing highly sensitive applications that require much larger policy sets. It offers a faster ramp-up to seamlessly handle massive peak traffic up to 200 Gbps. \*\*Standard****Premium** Standard: $1.25/hr | Premium: $2.00/hr Deployment Hourly Charges NUMBER OF NGFW RESOURCES Close The number of NGFW Resources depends on how many Azure regions in which you will deploy and the deployment model (centralized or distributed). Click on the links below to learn more. [Supported Regions](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/supported-regions-and-zones)[Deployment Models](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/deploy-cloud-ngfw-for-azure) The number of NGFW Resources depends on how many AWS regions you will deploy in and the deployment model (centralized or distributed). Click on the links below to learn more. [Supported Regions](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/getting-started-with-cloud-ngfw-for-aws/supported-regions-and-zones)[Deployment Models](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/getting-started-with-cloud-ngfw-for-aws/supported-cloud-ngfw-deployments) You may have deployed your application resources in multiple Availability zones (AZs) to ensure that your application remains available and continues to operate even in the face of disruptions or failures. You need to configure the Cloud NGFW resource to span the same Availability Zones for maintaining zone-affinity. There's no additional cost for configuring the Cloud NGFW resource to span up to three Availability Zones (AZs). As the traffic volume increases in any Availability zone, Cloud NGFW resource accordingly creates more VM-Series nodes in that availability zone. Security Services Close Cloud-delivered security services: Consistent, scaled security without added infrastructure. Advanced services are billed per resource based on the configuration. Click on the links below to learn more. [Advanced Threat Prevention (ATP)](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention)[Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering)[Advanced Wildfire](https://www.paloaltonetworks.com/network-security/advanced-wildfire)[Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security)[Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention) Advanced Threat Prevention Advanced URL Filtering Advanced WildFire Advanced DNS Security Enterprise DLP TRAFFIC SECURED PER MONTH (GB) Close This is the traffic secured per tenant, across all of your Cloud NGFW resources. Additional Options Centralized Management (Panorama) Close Usage of security services and centralized management are billed using the Add-Ons dimension. Click on the links below to learn more. [Azure Pricing](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/pricing)[AWS Pricing](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/getting-started-with-cloud-ngfw-for-aws/cloud-ngfw-pricing)[Centralized Management (Panorama Integration)](https://www.paloaltonetworks.com/network-security/panorama) Premium Support is available from Palo Alto Networks customer support **++at no additional cost.++** To receive support, customers must register at Palo Alto Networks Support Portal through the Cloud NGFW service. More details about the support services can be found in the [Palo Alto Networks EUSA.](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-global-customer-support-services-terms-and-conditions-eusa.pdf) Centralized Management (Strata Cloud Manager) Close Cloud NGFW is supported with SCM Pro. This calculator will provide a credit estimator with SCM Pro licensing. Note: SCM Pro includes SLS hence SLS is not added as a separate selection for Calculation. Click on the links below to learn more. [SCM Pro](https://docs.paloaltonetworks.com/strata-cloud-manager/activation-and-onboarding/strata-cloud-manager-licenses-and-support) Additional Availability Zones Close Cloud NGFW resources can be configured to span up to three Availability Zones at no extra cost. There's additional cost for configuring Cloud NGFW resources to span to more than three Availability Zones (AZs). As the traffic volume increases in any Availability zone, Cloud NGFW accordingly creates more VM-Series nodes in that availability zone. Select Additional Availability Zones3 + 1 additional3 + 2 additional3 + 3 additional Egress NAT Close For more information about Palo Alto Egress Traffic NAT select the link below. [Cloud NGFW for AWS - Egress Traffic NAT](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-aws/configure-egress-nat) Select AWS RegionUS East (N. Virginia)US East (Ohio)US West (N. California)US West (Oregon)Canada (Central)Europe (Ireland)Europe (London)Europe (Paris)Europe (Frankfurt)Europe (Stockholm)Europe (Milan)Asia Pacific (Tokyo)Asia Pacific (Seoul)Asia Pacific (Osaka)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Mumbai)Asia Pacific (Hong Kong)South America (Sao Paulo)Middle East (Bahrain)Africa (Cape Town) Bring Your Own IP Close For more information about the Bring Your Own IP option, select the link below. [Bring Your Own IP](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-aws/configure-egress-nat) Cloud NGFW Managed AWS EIPs Close For more information about the Cloud NGFW Managed AWS EIPs option, select the link below. [Cloud NGFW Managed AWS EIPs](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-aws/configure-egress-nat) Number of CNGFW managed EIPs Close As a general rule of thumb, please ensure you have at least one public IP address for every Gbps of traffic you plan to send via the NGFW resource. Pricing Summary (PAY-AS-YOU-GO) $0 Monthly Show Calculation PRODUCT CREDITS (for deployment profile) 0 Credits SUPPORT TIER Close When utilizing unified Software NGFW (VM-Flex) credits, your selected Support Tier (such as Premium or Standard) is calculated and billed as an additional overhead percentage on top of your base firewall deployment. To ensure complete transparency when scoping your environment, the calculator breaks this down into two distinct views: **Product Credits:** This reflects the exact number of credits required to actively provision and operate your firewall resources, instances, and security add-ons within your cloud deployment profile. **Total Credits to Purchase:** This highlights the grand total of credits you actually need to procure. It automatically calculates your Product Credits plus the necessary support tier overhead required to maintain your contract. Premium (18%)Premier Partner (18%)Platinum (24%)US Gov Premium (24%)US Gov Premium Partner (24%) TOTAL CREDITS TO PURCHASE 0 Credits (product credits + support) Show Calculation CLOUD NGFW CREDITS (LEGACY) 0 Credits Show Calculation Try Cloud NGFW for AWS Today [Start Your Free Trial](http://aws.amazon.com/marketplace/pp/prodview-nkug66dl4df4i) Contact [Palo Alto Networks](https://www.paloaltonetworks.com/company/contact-sales) for private pricing and formal quotes. Save this configuration as PDF Try Cloud NGFW for Azure Today [Start Your Free Trial](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/paloaltonetworks.pan_swfw_cloud_ngfw) Contact [Palo Alto Networks](https://www.paloaltonetworks.com/company/contact-sales) for private pricing and formal quotes. Save this configuration as PDF Disclaimer: This estimate is for planning purposes only. Your actual costs may vary. ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/igw/ngfw-for-aws-azure/images/panw-logo.svg) # Cloud NGFW Credit Estimator ## (For Cloud NGFW for AWS) Configuration Summary Cloud Provider AWS Credit Type Software NGFW SKU Tier Base Number of NGFW Resources 0 Availability Zones 3 Traffic Secured (GB/month) 0 Security Services Management Egress NAT Region --- Egress Traffic (GB/month) 0 IP Option BYOIP Managed EIPs 0 Pricing Summary (PAY-AS-YOU-GO) $0 Monthly PRODUCT CREDITS 0 Credits (for deployment profile) Support Tier: Premium (18%) TOTAL CREDITS TO PURCHASE 0 Credits (product credits + support) CLOUD NGFW CREDITS (LEGACY) 0 Credits Disclaimer: This estimate is for planning purposes only. Your actual costs may vary.