[![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/igw/ngfw-for-aws-azure/images/panw-logo.svg)](https://www.paloaltonetworks.com/)

# Cloud NGFW Credit Estimator

## (For Cloud NGFW for AWS and Cloud NGFW for Azure)

Select AWS or Azure  
**AWS\*\*\*\*AWS**  
**Azure\*\*\*\*Azure**  
Select SKU Tier  
**Base\*\*\*\*Premium**  
Base: $1.25/hr | Premium: $2.00/hr  
Deployment Hourly Charges  
NUMBER OF NGFW RESOURCES  
Close  
The number of NGFW Resources depends on how many Azure regions in which you will deploy and the deployment model (centralized or distributed). Click on the links below to learn more.

[Supported Regions](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/supported-regions-and-zones)[Deployment Models](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/deploy-cloud-ngfw-for-azure)  
The number of NGFW Resources depends on how many AWS regions you will deploy in and the deployment model (centralized or distributed). Click on the links below to learn more.
[Supported Regions](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/getting-started-with-cloud-ngfw-for-aws/supported-regions-and-zones)[Deployment Models](https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/getting-started-with-cloud-ngfw-for-aws/supported-cloud-ngfw-deployments)  
You may have deployed your application resources in multiple Availability zones (AZs) to ensure that your application remains available and continues to operate even in the face of disruptions or failures. You need to configure the Cloud NGFW resource to span the same Availability Zones for maintaining zone-affinity. There's no additional cost for configuring the Cloud NGFW resource to span up to three Availability Zones (AZs). As the traffic volume increases in any Availability zone, Cloud NGFW resource accordingly creates more VM-Series nodes in that availability zone.  
Number of Firewalls  
Security Services  
Close  
Cloud-delivered security services: Consistent, scaled security without added infrastructure. Advanced services are billed per resource based on the configuration.

Click on the links below to learn more.
[Advanced Threat Prevention (ATP)](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention)[Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering)[Advanced Wildfire](https://www.paloaltonetworks.com/network-security/advanced-wildfire)[Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security)[Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention)  
Subscription Customization
Advanced Threat Prevention
Advanced URL Filtering
Advanced Wildfire
Advanced DNS Security
Enterprise DLP  
TRAFFIC SECURED PER MONTH (GB)  
Close  
This is the traffic secured per tenant, across all of your cloud NGFW resources.  
Number of Firewalls  
additional options  
Support Options  
Centralized Management  
(Panorama)  
Close  
Usage of security services and centralized management are billed using the Add-Ons dimension. Click on the links below to learn more.
[Azure Pricing](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/pricing)  
AWS Pricing
[Centralized Management (Panorama Integration)](https://www.paloaltonetworks.com/network-security/panorama)  
Premium Support is available from Palo Alto Networks customer support **++at no additional cost.++** To receive support, customers must register at Palo Alto Networks Support Portal through the Cloud NGFW service. More details about the support services can be found in the [Palo Alto Networks EUSA.](https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/legal/palo-alto-networks-global-customer-support-services-terms-and-conditions-eusa.pdf)  
Centralized Management  
(Strata Cloud Manager)  
Close  
Cloud NGFW is supported with SCM Pro. This calculator will provide a credit estimator with SCM Pro licensing. Note: SCM Pro includes SLS hence SLS is not added as a separate selection for Calculation.

Click on the links below to learn more.
[SCM Pro](https://docs.paloaltonetworks.com/strata-cloud-manager/activation-and-onboarding/strata-cloud-manager-licenses-and-support)  
Availability Zones  
Close  
Cloud NGFW resources can be configured to span up to three Availability Zones at no extra cost. There's additional cost for configuring Cloud NGFW resources to span to more than three Availability Zones (AZs). As the traffic volume increases in any Availability zone, Cloud NGFW accordingly creates more VM-Series nodes in that availability zone.  
Availability Zones (if more than 3)
Select Number of Additional Availability Zones3 + 1 additional availability zone3 + 2 additional availability zone3 + 3 additional availability zone  
Egress NAT  
Close  
For more information about Palo Alto Egress Traffic NAT select the link below.
[Cloud NGFW for AWS - Egress Traffic NAT](https://docs.paloaltonetworks.com/cloud-ngfw-aws/administration/deploy-and-configure/deploy-and-configure-in-aws-console/configure-egress-nat?otp=task-zc1_5sm_zcc#task-zc1_5sm_zcc)  
Egress NAT
Select AWS RegionUS East (N. Virginia)US East (Ohio)US West (N. California)US West (Oregon)Canada (Central)Europe (Ireland)Europe (London)Europe (Paris)Europe (Frankfurt)Europe (Stockholm)Europe (Milan)Asia Pacific (Tokyo)Asia Pacific (Seoul)Asia Pacific (Osaka)Asia Pacific (Singapore)Asia Pacific (Sydney)Asia Pacific (Mumbai)Asia Pacific (Hong Kong)South America (São Paulo)Middle East (Bahrain)Africa (Cape Town)  
Egress Traffic to Internet per month (GB)  
Egress Traffic

Bring Your Own IP  
Close  
For more information about the Bring Your Own IP option, select the link below.
[Bring Your Own IP](https://docs.paloaltonetworks.com/cloud-ngfw-aws/administration/deploy-and-configure/configure-egress-nat?otp=task-zfg_gxm_zcc#task-zfg_gxm_zcc)  
Cloud NGFW Managed AWS EIPs  
Close  
For more information about the Cloud NGFW Managed AWS EIPs option, select the link below.
[Cloud NGFW Managed AWS EIPs](https://docs.paloaltonetworks.com/cloud-ngfw-aws/administration/deploy-and-configure/configure-egress-nat?otp=task-odt_h5m_zcc#task-odt_h5m_zcc)

Number of CNGFW managed EIPs  
Close  
As a general rule of thumb, please ensure you have atleast one public IP address for every Gbps of traffic you plan to send via the NGFW resource  
CNGFW managed EIPs  
Thank you! Your submission has been received!  
Oops! Something went wrong while submitting the form.  
Pricing summary  
.  
(PAY-AS-YOU-GO)

0  
Monthly  
Show Total PAYG Calculation  
Deployment Monthly Charge 0 = (( 0 NGFW resources \* (0 Availability Zones / 3.0) \* ($0 Base Firewall Price/Hour + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management)) + (0 CNGFW managed EIPs \* $0.01 per Hour)) \* 24 Hours per Day \* (365 Days per Year / 12 Months per Year)  
Traffic Secured Monthly Charge 0 = ( (0 GB Traffic Secured \* 0.016) (Minimum(0 GB Traffic Secured, 15,000 GB) \* 0.065) + (Minimum(0 GB Traffic Secured, 15,000 GB) \* 0.045) + 0 GB Traffic Secured \* 0.030) \* (1 + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management) + (0 GB Egress Traffic/Month \* 0 Cloud NGFW Price/GB)  
Total Monthly Charge 0 = 0 Deployment Costs + 0 Traffic Costs

CONTRACT (CREDITS)

0 Credits  
Contact [Palo Alto Network's](https://www.paloaltonetworks.com/company/contact-sales) sales for  
private pricing and formal quotes.  
Show Total Credits Calculation  
Deployment Credits 0 = (( 0 NGFW resources \* (0 Availability Zones / 3.0)) \* 0 Base Firewall Credits/Hour) + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management + (0 CNGFW managed EIPs \* 0.83 Credits per Hour)  
Traffic Secured Credits 0 = ( (0 GB Traffic Secured \* 1.3333) \* (1 (Minimum(0 GB Traffic Secured, 15,000 GB) \* 5.4200) + (Minimum(0 GB Traffic Secured, 15,000 GB) \* 3.75) + 0 GB Traffic Secured \* 2.5) \* 12 / 365 / 24 + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management) \* (12 / 365 / 24) + ( 0 GB Egress Traffic/Month \* 0 Cloud NGFW Price/GB \* 12 / 365 / 24 )  
Total Monthly Credits 0 = 0 Deployment Credits + 0 Traffic Credits

Try Cloud NGFW for AWS Today
[start your free trial](http://aws.amazon.com/marketplace/pp/prodview-nkug66dl4df4i)  
Try Cloud NGFW for Azure Today
[start your free trial](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/paloaltonetworks.pan_swfw_cloud_ngfw?tab=Overview)  
Save this configuration as PDF  
Disclaimer: This estimate is for planning purposes only. Your actual credits may vary. Infrastructure cost is covered in the calculations provided here. Advanced services are billed per resource based on the configuration.  
[![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/igw/ngfw-for-aws-azure/images/panw-logo.svg)](https://www.paloaltonetworks.com/)

# **Cloud NGFW for AWSAzure Credit Estimator**

Deployment Hourly Charges Selected  
Number of NGFW Resources  
0  
Security Services Selected  
\* No Security Service Selected  
\* Advanced Threat Prevention  
\* Advanced URL Filtering  
\* Advanced Wildfire  
\* Advanced DNS Security  
\* Enterprise DLP  
Additional Options Selected  
\* No Support Option Selected  
\* Centralized Management (Panorama)  
\* Availability Zones  
Number of Availability Zones Per NGFW Resource  
3  
\* Egress NAT  
Selected Region  
...  
Egress Traffic to Internet per Month  
...  
\*...  
Number of CNGFW managed EIPs  
0

Traffic Secured Per Month (GB) Selected  
0  
[![Palo Alto Networks Logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/includes/igw/ngfw-for-aws-azure/images/panw-logo.svg)](https://www.paloaltonetworks.com/)

Pricing summary  
.  
(PAY-AS-YOU-GO)

0

Deployment Monthly Charge 0 = (( 0 NGFW resources \* (0 Availability Zones / 3.0) \* ($0 Base Firewall Price/Hour + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management)) + (0 CNGFW managed EIPs \* $0.01 per Hour)) \* 24 Hours per Day \*(365 Days per Year / 12 Months per Year)  
Traffic Secured Monthly Charge 0 = ( (0 GB Traffic Secured \* 0.016) (Minimum(0 GB Traffic Secured, 15,000 GB) \* 0.065) + (Minimum(0 GB Traffic Secured, 15,000 GB) \* 0.045) + 0 GB Traffic Secured \* 0.030) \* (1 + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management) + (0 GB Egress Traffic/Month \* 0 Cloud NGFW Price/GB)  
Total Monthly Charge 0 = 0 Deployment Costs + 0 Traffic Costs

CONTRACT (CREDITS)

0 Credits

Deployment Credits 0 = ( 0 NGFW resources \* (0 Availability Zones / 3.0) \* (0 Base Firewall Credits/Hour + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management)) + (0 CNGFW managed EIPs \* 0.83 Credits per Hour)  
Traffic Secured Credits 0 = ( (0 GB Traffic Secured \* 1.3333) \* (1 (Minimum(0 GB Traffic Secured, 15,000 GB) \* 5.4200) + (Minimum(0 GB Traffic Secured, 15,000 GB) \* 3.75) + 0 GB Traffic Secured \* 2.5) \* 12 / 365 / 24 + 0 Threat Prevention + 0 URL Filtering + 0 Advanced Wildfire + 0 Advanced DNS Security + 0 Data Loss Prevention + 0 Centralized Management) \* (12 / 365 / 24) + ( 0 GB Egress Traffic/Month \* 0 Cloud NGFW Price/GB \* 12 / 365 / 24 )  
Total Monthly Credits 0 = 0 Deployment Credits + 0 Traffic Credits

Try Cloud NGFW for AWS Today
[start your free trial](https://aws.amazon.com/marketplace/pp/prodview-sdwivzp5q76f4?sr=0-2&ref_=beagle&applicationId=AWSMPContessa)  
0  
CREDITS  
Try Cloud NGFW for Azure Today
[start your free trial](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/paloaltonetworks.pan_swfw_cloud_ngfw?tab=Overview)