CyberIndexBeta

Product

Virtual next-generation firewall for private and public cloud environments. It is available as a cloud instance and a virtual appliance. Recorded capabilities include application control, central management console, deep packet inspection and high availability. Its record also notes intrusion prevention (ips), sd-wan, ssl/tls inspection and stateful inspection. It is aimed at Enterprise and Service Provider buyers.

Current Version
12.2.4
Market
EnterpriseService Provider
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-28

Vendor

Palo Alto Networks was founded in 2005 by Nir Zuk, who had written the first stateful inspection engine at Check Point, and built the next-generation firewall — an appliance that identifies the application in a flow rather than judging it by port number. That product made the company, and it is now one of the largest security firms in the world, listed on Nasdaq, with around 16,000 employees and over 70,000 customers. Its range is organised under three names: Strata for network security and the PA-Series firewalls, Prisma for cloud and SASE, and Cortex for security operations — Cortex XDR for detection and response, Cortex XSOAR for automation, Cortex Xpanse for attack-surface discovery and Cortex XSIAM as the platform it is steering customers toward. Unit 42 is its threat intelligence and incident response arm. What appears in this index is the endpoint and firewall end of that portfolio. Its endpoint agent is sold as part of a platform rather than on its own, which is worth knowing when comparing its price and its test results with a standalone product's. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2005
Customers
70K organisations
Users
100M users
Revenue
$11.5B (2026)

Platforms

Cloudnative
Virtual Appliancenative

Target Market

Enterprise primaryService Provider secondary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keyoptional module
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN Gatewaykeynative
SD-WANnative
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

1 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 12.2.4platform not recorded

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-28New versionNew version: 12.2.4evidence
  • 2026-10-13New versionNew version: 12.2.3evidence
  • 2026-10-09Capability addedVPN Gateway: built inevidence
  • 2026-10-09Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-08Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-08Capability addedIntrusion Prevention (IPS): optional moduleevidence
  • 2026-10-08Capability addedSD-WAN: built inevidence
  • 2026-10-08Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-10-06Capability addedCentral Management Console: built inevidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-06Certification addedCertified: FIPS 140-3evidence
  • 2026-10-02Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertification expired: Common Criteriaevidence
  • 2026-10-02Certification addedCertified: Common Criteriaevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: PAN-OS (Virtual Appliance)evidence
  • 2026-09-20Platform addedRuns on Cloudevidence
  • 2026-09-20Platform addedRuns on Virtual Applianceevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
  • 2026-09-19Product updatedAlso sold to: Service Providerevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.