Cloud NGFW for AWS now supports Palo Alto Networks Software NGFW Credits. Instead of procuring separate credit buckets, you can now purchase a single, flexible credit pool to fund your Cloud NGFW for AWS.

The Software NGFW Credit pool automatically aggregates unallocated credits from your main pool to absorb workload spikes before incurring Azure Marketplace PAYG overage fees. The system automatically draws unallocated credits from your main pool to cover tenant usage spikes. You can easily manage high-level credit allocation via Parent Deployment Profiles in the Customer Support Portal (CSP) and assign tenant-level credit allowances via Child Deployment Profiles in the CMS Hub App. You can also monitor real-time baseline consumption, SmartCredit buffer usage, and marketplace overflow through interactive Chart and Table views in the CMS Hub App.

For more information, see CNGFW for AWS Pricing and Software NGFW Credit and Redistribution.

Palo Alto Networks introduces the Standard and Premium capacity SKU for Cloud NGFW for AWS. These new SKU types offer enhanced performance and cost-optimized infrastructure scaling, allowing you to tailor your firewall capabilities to your organizational traffic demands.

The Standard SKU is available at no additional base cost over the foundational type, providing an entry-level cloud-native scaling path that handles up to 2 Gbps fat sessions and scales out to secure up to 45 Gbps of traffic. =

For mission-critical applications with massive data requirements, the Premium SKU expands its capabilities to support up to 4 Gbps fat sessions and a scale-out capacity of up to 100 Gbps of traffic.

The modifications in SKU type are unidirectional and standalone operations. The downgrade is not supported, and concurrent configuration changes cannot be processed simultaneously alongside an active SKU upgrade. For more information, see CNGFW for AWS Pricing and CNGFW for AWS Limits and Quotas.

Cloud NGFW for AWS now supports Advanced WildFire (AWF) and Advanced DNS Security (ADNS) on PAN-OS 11.2 or later, delivering Precision AI-powered protection against zero-day malware and evasive shadow domains.

When enabled, these modules are seamlessly integrated into your usage metrics and billed at a rate of 30% of the base firewall credits. For more information, see CNGFW for AWS Pricing.