Products & Platforms

The same PAN-OS NGFW as a virtual machine — consistent App-ID, Threat Prevention and decryption across every major cloud and hypervisor, automated with Terraform and native templates.

Layer-7 visibility and threat prevention for east-west and outbound container traffic, deployed as a Kubernetes service and managed by Panorama alongside your physical and virtual firewalls.

Best-in-class NGFW delivered as a native, managed service — no software to patch or scale. Inline Threat Prevention and URL Filtering with tight integration into AWS and Azure networking.

Single-pane management for hundreds of firewalls — device groups and templates enforce consistent policy, with aggregated logging and rich reporting. Available as a hardware or virtual appliance, on-prem or in cloud.

Cloud-delivered management with AIOps for NGFW — predicts disruptions before they happen, surfaces best-practice gaps, and centralises configuration across hardware, software and Cloud NGFW from one console.

The OS behind every NGFW form factor. App-ID, User-ID, Content-ID and Device-ID classify traffic by application, user, content and device — enabling true least-privilege, application-aware policy.

Inline deep-learning IPS that blocks known and never-before-seen exploits, evasive malware and command-and-control in real time — going well beyond signature-only IPS to stop zero-day attacks as they happen.

The industry's largest malware-analysis cloud — detonates unknown files in a sandbox and distributes new protections globally in near real time, stopping zero-day malware across the whole platform.

Analyses and categorises unknown and newly-registered URLs inline with machine learning, blocking phishing, malware and evasive web threats at first encounter rather than after the fact.

Stops attacks that abuse DNS — domain-generation algorithms, tunnelling and data exfiltration — using machine learning and a continuously updated threat-intelligence database.

Cloud-delivered data loss prevention with one consistent set of data patterns and policies across NGFW and Prisma Access — protect sensitive data everywhere it moves, without deploying appliances.

Agentless discovery, identification and risk assessment of every connected device — including unmanaged and OT assets — with automatically recommended least-privilege policy enforced by the NGFW.

Extends NGFW protection to remote and hybrid users via VPN and ZTNA — the same App-ID, Threat Prevention and URL Filtering apply wherever your people work, on any device.

PAN-OS-native SD-WAN converges secure connectivity and full NGFW in a single appliance — application-aware path selection and self-healing links with no bolt-on hardware to manage.