Advanced Threat Prevention: Leverage industry-first prevention of zero-day attacks with full-featured IPS, antimalware, and command-and-control (C2) protection capability (per-device subscription for unlimited users).

• The Intrusion Prevention System (IPS) blocks various threats and exploits, using methods like signature matching, anomaly detection, and deep learning, and applies threat intelligence and policy-based SSL decryption to both inbound and outbound traffic.
• The Antimalware feature uses a high-speed stream-based engine to detect, and block known malware and their variants, consolidating the need for separate IPS and proxy-based products into a single license.
• The C2 Protection feature uses a unique combination of signatures and cloud-based preventions to stop malicious communications, identify botnet patterns, and protect data within the organization.
• The Vulnerability Protection feature combines signatures, deep learning, and machine learning to detect and prevent known and unknown exploits, thereby safeguarding against initial infection from unknown or unpatched vulnerabilities.

Global Protect: Deliver security to any user and any device, anywhere (per-device subscription).

• Remote Access enables secure connectivity to business applications from various devices, allowing control and policy enforcement for all types of applications, including cloud-native, legacy, and SaaS. 
• Host Information Profile assesses and inventories endpoint configurations to create a profile that enforces access policies through Prisma Access and Next-Generation Firewalls based on endpoint security. 
• Remote and Internal User Authentication supports multiple authentication methods, providing Prisma Access and Next-Generation Firewalls with user-to-IP mappings for User-ID technology upon successful user authentication. 
• Device Quarantine offers an automated mechanism to identify and isolate compromised endpoints, preventing the spread of infections and maintaining network integrity.

Panorama: Take advantage of streamlined, powerful, and efficient network security management—available as an appliance or virtual machine—for multiple Next-Generation Firewalls, regardless of their form factor or location (subscription based on the number of firewalls managed).

• Network and Device Configuration centralizes the management of devices and security settings across all firewall groups, streamlining configuration through device group hierarchies, template stacking, and RBAC. 
• Device Configuration Import allows for the simple incorporation of preproduction or external firewalls into a Panorama-managed configuration, facilitating a quick transition to centralized management. 
• Single Security Rule Base consolidates security operations with a unified rule base for all policies, capabilities, and subscriptions, enhancing security and operational efficiency. 
• Central Visibility (ACC) offers in-depth insights into network traffic and threats through the Application Command Center, aiding in informed decision-making for network and security management. 
• Automatic Correlation Engine expedites the identification of compromised hosts by correlating IoCs across the network, reducing the need for manual log analysis and clarifying threat identification. 
• Dedicated Log Collectors optimize log collection for larger, distributed deployments, reducing backhaul needs and offering deployment flexibility, especially for distributed Next-Generation Firewall deployments. 
• AIOps Plugin assists in enforcing best practices for changes by validating policy commits in Panorama, notifying you of potential issues before they are implemented. 
• Software Upgrade streamlines the process with a skip version upgrade feature that allows for a single reboot upgrade within a standard maintenance window, simplifying updates for HA pairs and managed firewalls and providing quick access to the latest PAN-OS security features.

Advanced WildFire: Stop evasive malware with Advanced WildFire, the largest cloud-based prevention engine that uses machine learning and crowdsourced intelligence to protect organizations from the hardest-to-detect threats (per-device subscription for unlimited users).

• Advanced Analysis identifies unknown threats using a large malware analysis community, machine learning, and custom hypervisor-based analyses to detect evasive threats. 
• Inline Prevention employs a machine learning-based engine within Next-Generation Firewalls to prevent malware and fileless attacks without needing cloud submission. 
• Unknown Threat Protection instantly creates and distributes protections against new threats to all subscribers, blocking malicious files, URLs, and command-and-control traffic. 
• File Behaviour Analysis provides insights into malware behaviour, enabling quick identification of infected users and detailed investigation of unknown threats. 
• Cloud-Based Prevention leverages a cloud architecture for automatic global threat prevention, simplifying network protection without additional management burdens. 
• Multivector Analysis offers a comprehensive solution that prevents complex attacks by analysing multiple stages and vectors, updating URL Filtering with phishing or exploit findings. 
• Comprehensive File Execution conducts thorough threat analyses by executing unknown files across various OS and application environments, surpassing limited sandbox techniques. 
• Intelligent Runtime Memory Analysis rapidly identifies and stops targeted attacks by analysing memory snapshots during runtime and generating protections across the network.

DLP: Get integrated data protection coverage—across every network, cloud, and user. By delivering consistent policies across all distributed control points from a single cloud-delivered DLP engine, Enterprise DLP enables a unified approach at egress points, the edge, and the cloud, all in a single, easy-to-manage pane of glass.

• Protect Physical Networks employs PA-Series Next-Generation Firewalls to inspect web traffic and safeguard sensitive data in motion. 
• Protect Virtual Networks integrates with VM-Series firewalls to secure sensitive data across various environments, including on-premises, hybrid, and multicloud. 
• Protect SaaS Apps utilizes Next-Generation CASB to identify and secure sensitive data within both approved and unapproved cloud apps, reducing data leaks and exposure. 
• Protect Public Cloud Infrastructures uses Prisma Cloud to safeguard sensitive data stored within public cloud platforms. 
• Protect SASE and Hybrid Workforce is implemented through Prisma Access to protect sensitive data in motion for networks, branch offices, and remote workers.

AIOps: Take advantage of the industry’s first domain-centric AIOps for NGFW that redefines firewall operational experience by interpreting, predicting, and resolving problems before they become business-impacting. AIOps, launched earlier in 2022, processes 49 billion metrics every month across 60,000 firewalls, and proactively shares 24,000 misconfigurations and 17,000 firewall health issues with customers for resolution every month. AIOps for NGFW can be used on all PA-Series firewalls, VM-Series firewalls, and Panorama deployments that run on PAN‑OS 10.0 and above. AIOps is available in two versions: a free version and a premium (paid) version (subscription based on the number of firewalls managed).

• Proactively Strengthen Security Posture delivers tailored policy recommendations based on built-in best practices and machine learning insights, which are derived from industry standards, security policy context, and telemetry data from Palo Alto Networks firewalls. AIOps ensures adherence to these best practices and allows for pre-emptive correction of security policy inefficiencies during the change management process in Panorama, enhancing cyber defences and optimizing resource utilization. 
• Proactively Resolve Firewall Disruptions provides predictive analytics to anticipate firewall health, performance, and capacity issues up to seven days in advance. AIOps offers actionable insights to pre-emptively address potential disruptions, ensuring continuous optimal operation of Next-Generation Firewalls (NGFWs). 
• Achieve a Unified View into Security Effectiveness consolidates visibility across organizational activities, including applications, threats, networks, and users, as well as security subscription services like DNS Security and Advanced WildFire. AIOps employs shared network and threat intelligence to highlight significant and emerging threats that have been thwarted by the security infrastructure, as well as to identify areas requiring immediate attention.

Advanced URL Filtering: Identify and prevent access to malicious websites (per-device subscription for unlimited users).

• Safe Web Access provides real-time protection against web-based attacks, including phishing, using inline deep learning on Next-Generation Firewalls and Advanced URL Filtering that rapidly classifies web content without analyst intervention. 
• Policies Based on Web Category and User Group enable the application of security best practices, selective SSL decryption, data loss prevention, and blockage of high-risk file types based on website categories, enhancing attack risk minimization. 
• Maximized Operational Efficiency removes the need for additional web security hardware, simplifies rule management via application- and user-based policies, and maintains web application performance through local and cloud URL lookups.

IoT: Protect every device on your network with the most comprehensive Zero Trust security for smart devices, allowing you to stop threats and control the risk of IoT, IoMT, OT, and Bluetooth devices on your network. IoT Security has three customized products for enterprises, healthcare providers, and industrial corporations, making it easy to see and secure the devices unique to each vertical.

• Quickly Discover and Assess Every Device utilizes machine learning and App-ID to identify and classify all IoT, IoMT, and OT devices in the network, providing extensive device attributes for security team analysis. 
• Machine learning-powered behavioural profiling and anomaly detection, combined with vulnerability and network usage data, facilitate rapid and informed security decisions. 
• Easily Segment and Enforce Least Privileged Access allows for context-aware segmentation and risk-based policy recommendations to control IoT device communication and restrict lateral movement. 
• Protect Against Known and Unknown Threats leverages cloud-based security services to shield IoT devices from threats, integrating alerts and device context within Next-Generation Firewalls. 
• Simplify Your Operations offers native integration of IoT Security into existing Next-Generation Firewalls, enhancing visibility and workflow without the need for additional sensors or agents.

Strata Cloud Manager empowers you with AI-powered, unified management and operations for your entire network security deployment. With Strata Cloud Manager you can easily manage your entire Palo Alto Networks Network Security infrastructure - your NGFWs and SASE environment - from a single, streamlined user interface. Gain comprehensive visibility into users, branch sites, applications, and threats across all network security enforcement points; this gives you actionable insights, better security, and easy troubleshooting and problem resolution.

• Predict and Prevent Network Disruptions: Strata Cloud Manager predicts and prevents network disruptions and quickly remediates issues, so that you and your users can continue day-to-day business and stay productive.
• Strengthen Security with Real-Time Best Practices: Strata Cloud Manager identifies vital and underused security capabilities and guides you to enable them based onthe best practices that align with your needs. Strengthen your security posture with built-in best practices, and inline remediation features powered by AIOps.
• Simple and Consistent Network Security Management and Operations: Strata Cloud Manager consolidates your security tools for improved operation and insights, so that you can adopt a simple and consistent management experience for your entire network security stack.

DNS Security: Apply predictive analytics to disrupt attacks that use DNS for C2 or data theft (per-device subscription for unlimited users).

• Prediction and Blocking of New Malicious Domains employs predictive analytics and machine learning to prevent advanced DNS-layer threats, offering comprehensive visibility and coverage across users, devices, and locations. 
• Industry-First Detections utilize pioneering techniques to prevent command-and-control, data exfiltration, phishing, and malware delivery at the DNS layer. 
• Actionable Insights deliver detailed threat reporting for DNS traffic, providing context for security optimization, policy crafting, and swift threat remediation through best-in-class detection and real-time inline enforcement. 
• Simplified Security Through Automation integrates with Next-Generation Firewalls to remove the need for separate DNS security tools, enabling automated responses to threats and benefiting from continuous DNS security advancements via a cloud-based architecture.

SD-WAN: Enable secure branch connectivity (per-device subscription required on the edge device and the hub device).

• Integrated Best-in-Class Security ensures uniform protection across branch offices, data centers, and cloud environments by using the industry's top ML-Powered Next-Generation Firewalls to defend applications, users, and devices from all threats. 
• Optimized Performance enhances system efficiency through flexible routing options, including Prisma Access hubs and data center hubs, for application access based on application performance, without bandwidth constraints. 
• Simplicity streamlines branch deployment by utilizing Prisma Access hubs and data centers as a global network backbone, centralizing the management of security and networking policies to reduce operational complexity and costs and foster better collaboration between Network Operations Center (NOC) and Security Operations Center (SOC) teams.