Search
- Tech Docs
PAN-OS
Our network security platform is natively integrated with simplified, centralized management. PAN-OS incorporates pioneering innovations that leverage AI, ML and Quantum security to protect against current and future threats with in-depth visibility.
- See what's new
- Watch the launch
Eleven Years as a Leader
Doesn’t Happen by Magic
For the 11th straight year, we’ve been named a Leader in
the Gartner® Magic Quadrant™ for Network Firewalls.
The way we see it, that’s what happens when you
innovate to stop the most sophisticated threats
- Get the report
A CISO's Guide to Quantum Security - A Six-Part Series
Quantum Computing: Closer than you think, not as difficult as you expect
Introducing PAN-OS Cosmos 11.1
Suddenly, AI-powered threats don’t seem so intelligent.
Watch now
Modernize Your Network Security With Artificial Intelligence
Key Principles to Adopting a Zero Trust, AI-Powered Approach to Network Security
Read now
Report: Gartner® Magic Quadrant™ for Network Firewalls
Rated a Leader for the 11th time, with high scores in Execution and Vision.
Get the report
The Forrester Wave™: Enterprise Firewalls, Q4 2022 Report
Palo Alto Networks named a Leader in Enterprise Firewalls.
Register now
- Know your app traffic
- Manage user access
- Create device-based rules
- Scan traffic content
- Maximize throughput
- Secure encrypted traffic
- Future proof VPN
Understand the true identity of your applications
PAN-OS® includes App-ID™, our patented traffic classification technology. It automatically discovers and controls new applications — even those that try to evade detection by masquerading as legitimate traffic, hopping ports or sneaking through firewalls under encryption. Plus, our latest post-Quantum cryptographic algorithms prohibit nonsanctioned activity, using vulnerability signatures and threat reporting.
- Learn more
Authenticate and authorize users and achieve Zero Trust for identity
PAN-OS includes User-ID™ and Cloud Identity Engine simplify user identification and authentication, while making it easy to deploy Zero Trust. Cloud Identity Engine also helps aggregate and synchronize user information across identity providers, allowing consistent authentication and authorization of users, regardless of location and where user identity stores reside. This is all done with point-and-click configuration that automatically synchronizes identity across all identity providers.
- Learn more
Manage device security on your network with ease
Device-ID™, a feature of PAN-OS, provides policy rules for devices regardless of changes to IP address or location. Gain context for how events relate to devices and device policies. PAN-OS can help improve security, decryption, QoS and authentication policies.
- Learn more
Block exploits that evade other security methods
Similar to Device-ID and App-ID, Content-ID™ gives you the power to understand and control the content of traffic moving through your network. Content-ID provides comprehensive threat protection in a single scan of network traffic, optimizing your NGFW performance.
- Learn more
Enable high-throughput, low-latency security
The traditional strategy of simply adding more and more security features results in performance degradation and increased latency. Our single-pass architecture performs all necessary security functions in a single scan, reducing complexity and minimizing total cost of ownership.
- Learn more
Protect against threats that hide behind encryption
Unless inspected, encrypted traffic leaves organizations blind to security risks hidden inside. Hackers take advantage of this lack of visibility to deliver malware within encrypted traffic. PAN-OS provides comprehensive decryption for TLS and SSL encrypted traffic, including TLS 1.3 and HTTP/2.
- Learn more
Protect against Harvest Now, Decrypt Later (HNDL) attacks
Harvest Now, Decrypt Later (HNDL) attacks are a real threat to data privacy today, even though a cryptographically relevant quantum computer powerful enough to break encryption is years away. Safeguard your data with PAN-OS post-Quantum VPNs that are based on open standards.
- Learn More
Cloud Identity Engine
The industry’s most comprehensive user identity solution for network security, enabling you to deliver Zero Trust in a cloud-first world.
Read the solution brief
Enable identity-based controls in a cloud-first world
Managing identities has become challenging. See our approach.
Intelligent security, proven ROI
Benefit from efficiency gains, reduced likelihood of data breaches, lower licensing costs and enhanced security.
247%
RETURN ON INVESTMENT
45%
BREACH REDUCTION
$28.5M
NET PRESENT VALUE
Previous Innovations
In addition to the latest features in PAN-OS 11.1, you can also leverage innovations introduced in previous releases.
PAN-OS 11.1
PAGE
Inline AI-powered Security Services, Strata™ Cloud Manager and more
Read about PAN-OS 11.1
PAN-OS 11.0
WEBPAGE
Advanced WildFire®, Advanced Threat Prevention, AIOps for NGFW, Next-Gen CASB and more
Read about PAN-OS 11.0
PAN-OS 10.2
WEBPAGE
Advanced Threat Prevention, AIOps for NGFW, Advanced URL and DNS protections, and more
Read about PAN-OS 10.2
PAN-OS 10.1
WEBPAGE
Cloud Identity Engine, SaaS Security, Advanced URL Filtering and more
Read about PAN-OS 10.1
PAN-OS 10.0
Page
IoT Security, unknown threat prevention with inline ML, Enterprise DLP, Simplified Decryption, and more
Read about PAN-OS 10.0
PAN-OS 9.1
Page
Integrated SD-WAN, dynamic user policy enforcement, enhanced visibility into mobile user activity
Read about PAN-OS 9.1
PAN-OS 9.0
Page
DNS Security, Policy Optimizer to close dangerous policy gaps, stunning performance improvements, and more
Read about PAN-OS 9.0
Become an expert in network security
Dive deeper into the technology behind our Next-Generation Firewalls by taking a curated journey through relevant resources we’ve collected from our site.
Become an expert
Get the latest news, invites to events, and threat alerts
Products and Services
- Network Security Platform
- CLOUD DELIVERED SECURITY SERVICES
- Advanced Threat Prevention
- DNS Security
- Data Loss Prevention
- IoT Security
- Next-Generation Firewalls
- Hardware Firewalls
- Strata Cloud Manager
- SECURE ACCESS SERVICE EDGE
- Prisma Access
- Prisma SD-WAN
- Autonomous Digital Experience Management
- Cloud Access Security Broker
- Zero Trust Network Access
- Code to Cloud Platform
- Prisma Cloud
- AI-Driven Security Operations Platform
- Cortex XDR
- Cortex XSOAR
- Cortex Xpanse
- Cortex XSIAM
- External Attack Surface Protection
- Security Automation
- Threat Intel and Incident Response Services
- Proactive Assessments
- Incident Response
- Transform Your Security Strategy
- Discover Threat Intelligence
Company
- About Us
- Careers
- Contact Us
- Corporate Responsiblity
- Customers
- Investor Relations
- Location
- Newsroom
Popular Links
- Blog
- Communities
- Content Library
- Cyberpedia
- Event Center
- Manage Email Preferences
- Products A-Z
- Product Certifications
- Report a Vulnerability
- Sitemap
- Tech Docs
- Unit 42
- Do Not Sell or Share My Personal Information
