Next Generation Firewall


By "fixing the firewall," Palo Alto Networks' enterprise firewalls solve a variety of customer problems - while often simplifying enterprise security infrastructures. With the ability to control applications, users, and content at the enterprise firewall, customers realise improvements in security, performance, and cost. With Palo Alto Networks award-winning enterprise firewall technologies, organizations regain the application visibility and application control often sought, but rarely achieved with complex, expensive, traditional security infrastructures, ultimately preventing threats.

Palo Alto Networks' Next-Generation Firewalls

Palo Alto Networks' next-generation firewalls enable enterprises to identify and control applications, users, and content-not just ports, IP addresses, and packets-using three unique identification technologies: App-ID, User-ID, and Content-ID. These identification technologies allow enterprises to securely enable application usage using business-relevant concepts, instead of following the traditional "all-or-nothing" approach offered by traditional port-blocking firewalls used in many security infrastructures.

Core Technologies



Classify all traffic, on all ports, all the time-irrespective of protocol, encryption or evasive tactic.



Securely enable applications on your network based on users and groups-not just IP addresses.



Real-time content scanning blocks threats, controls web surfing and limits data and file transfers.


Delivered as a purpose-built appliance, every Palo Alto Networks next-generation firewall utilizes dedicated, function specific processing that is tightly integrated with a single-pass software engine. This unique combination of hardware and software maximizes network throughput while minimizing latency. Each of the hardware platforms supports the same rich set of next-generation firewall features ensuring consistent operation across the entire line.