Palo Alto Networks PA-560 Next-Generation Firewalls
Cloud NGFW on Azure
Overview:
Organizations need a straightforward solution to implement cutting-edge network security for their expanding public cloud workloads. This includes robust Layer 7 identification and control to analyze application behavior and advanced security to mitigate modern cyberattacks, all while minimizing operational complexity for network security, cloud security, and DevOps teams.
Highlights
- Streamline operations with zero maintenance: Experience the benefits of a fully managed Next-Generation Firewall (NGFW) service with automated elastic scaling and simplified deployment, eliminating the need for manual updates or infrastructure management
- Extend best-in-class security from on-premises to Azure: Seamlessly integrate their cloud environment with Panorama® and Strata™ Cloud Manager to unify policy management and gain centralized visibility across all environments
- Secure Azure Virtual Networks (VNets): Protect workloads with patented App-ID™ technology for precise Layer 7 identification and control of applications, Advanced Threat Prevention for real-time security, and ML-powered Advanced URL Filtering to block unknown threats instantly.
- Enhance the Azure experience: Access Cloud NGFW on Azure through Azure Marketplace, with deep integration into Azure Application Insights, Azure Virtual WAN, Azure Key Vault, and other native Azure services.
- Flexible credit management: Ensure dynamic resource allocation and efficient scaling across regions.
Why Cloud NGFW on Azure
As cloud adoption accelerates, organizations face increasing challenges in securing workloads at scale. Traditional security solutions often lack the agility, visibility, and advanced protections needed for dynamic Azure environments. Built for cloud-native workflows, Cloud NGFW on Azure directly addresses these challenges by offering:
- Proactive threat prevention: Stops evolving threats in real time with AI-powered protections against zero-day exploits, malware, and command-and-control (C2) attacks.
- Comprehensive cloud security: Delivers Layer 7 application identification and control to ensure granular awareness of application, user, and workload traffic across outbound, inbound, and VNet-to-VNet flows.
- Seamless Azure Native Integration: View Cloud NGFW performance and health information directly in the Azure Application Insights console. It integrates effortlessly into Azure services like Azure Virtual WAN, Azure Key Vault, and Azure Marketplace. Plus, it ensures operational consistency and simplicity for network security, cloud security, and DevOps teams.
- Zero maintenance, full scalability: Eliminates operational overhead with a fully managed service that offers automated scaling, high availability, and centralized management
- Flexible credit management: Adapts quickly to changing needs with a dynamic credit allocation system, ensuring cost efficiency and scalability across regions.
Application Identification and Categorization with Full Layer 7 Inspection
Cloud NGFW on Azure redefines cloud network security by using advanced, AI-powered services to protect applications from rapidly evolving cloud-based and network-based threats. It automatically detects and blocks malware, C2 traffic, and vulnerability exploits while managing traffic within and across VNets.
Internet Outbound Traffic- Challenges: Outbound traffic exposes workloads to data exfiltration, malicious websites, phishing attempts, and nonweb-based attacks such as file transfers or encrypted traffic.
- Solution: Cloud NGFW on Azure integrates patented App-ID and Threat Prevention technologies to block both web and nonweb attacks with Layer 7 application controls for precise traffic enforcement.
- Challenges:Attackers exploit web-facing apps using remote code execution, SQL injection, and bypassing traditional web application firewalls (WAFs).
- Solution: Cloud NGFW on Azure integrates patented App-ID and Threat Prevention technologies to block both web and nonweb attacks with granular, application-layer controls.
- Challenges:Without proper segmentation, malicious actors can move laterally across workloads, exploiting trust relationships between applications.
- Solution: To prevent lateral movement, Cloud NGFW on Azure applies advanced segmentation, Threat Prevention, and App-ID for Layer 7-based segmentation and traffic control between VNet subnets.
- Challenges:Azure Application Gateway provides basic WAF functionality but lacks the deep security visibility and enforcement needed to prevent sophisticated attacks such as malware, C2 traffic, or protocol tunneling. It also doesn’t protect nonweb traffic such as SSH, RDP, or FTPs
- Solution: Cloud NGFW on Azure complements Application Gateway by delivering inline threat prevention and Layer 7 application identification and control after routing decisions are made. This deployment model enables organizations to retain Application Gateway’s native routing benefits while enforcing granular traffic inspection and advanced security controls through a centralized NGFW.
Zero Infrastructure Overhead
Palo Alto Networks handles deployment, scaling, updates, and maintenance.
Dynamically scales to meet changing workload demands.
Cloud NGFW on Azure automatically scales up to 100 Gbps for both VNet and Virtual WAN deployments.
Flexible Procurement Options
Start with a free trial through Azure Marketplace.
Pay-as-you-go (PAYG) model with hourly and per-GB pricing.
Tailored pricing and deployment options for enterprises.
Use Palo Alto Networks credits across AWS and Azure, covering Cloud NGFW, Panorama, Strata Cloud Manager, and Strata Logging Service.
Premium Support Services
Tap into a vibrant customer community and knowledge base for quick answers to common questions
Access technical documentation, troubleshooting guides, and ticketing services for personalized assistance.
Get real-time monitoring of your organization’s Cloud NGFW instance to ensure optimal performance and uptime.
Receive callback assistance from Palo Alto Networks technical experts anytime, day or night, to address critical issues
Documentation:
Download the Palo Alto Networks Virtual Firewall Overview Datasheet (PDF).
Download the Palo Alto Networks PA-200 Specification Datasheet (PDF).