ngfw logo
  • Products
  • Solutions
  • Resources
  • Get Started
Palo Alto Networks logo icon white arrow icon pointing left to return to main Palo Alto Networks site
Search
  • Tech Docs

 

 

PAN-OS 8.0: Protection. Delivered.

To provide organizations with the best security capabilities to prevent successful cyberattacks, PAN-OS® 8.0, includes a colossal amount of enhancements and capabilities, including:

  • Secure any cloud! AWS, Azure and more
  • Secure SaaS (Office 365®, Box, Slack®) with visibility and enforcement
  • Prevent sandbox evasion, automate C2 detection, and leverage advanced intel sharing
  • Prevent credential theft usage and abuse
  • Simplify security operations with enhanced management, speed and automation
  • New high-performance hardware models to tackle encrypted traffic and more

Learn more about the new Features Introduced in PAN-OS 8.0.

For questions about PAN-OS 8.0 visit the Live Community.


Accelerating Multi-Cloud Deployments

Organizations are rapidly embracing multi-cloud architectures that span software-defined data centers (private clouds) and public cloud environments. To help organizations protect their cloud-based applications and data from cyberattacks, PAN-OS 8.0 expands the VM-Series with new models and optimized performance, making it the broadest, most powerful line of virtualized firewall appliances on the market. New scalability and resiliency features for Microsoft® Azure® and Amazon® Web Services enable organizations to build secure cloud centric architectures. Workflow automation features for VMware® NSX® and KVM with OpenStack® help streamline VM-Series deployments.

Related Links:

  • Innovation Page: Securely Enabling Public and Private Clouds
  • Virtualized Next-Generation Firewall
  • Features Introduced in PAN-OS 8.0

Enabling the Safe Use of SaaS Applications

Software-as-a-service (SaaS) applications are changing the way organizations do business. Despite being incredibly useful tools to drive productivity, they pose high levels of risk. 

PAN-OS 8.0 introduces several new capabilities helping our customers gain unprecedented levels of SaaS visibility and control based on users, content and applications. Prisma™ SaaS security service, a key component of our platform for securing sanctioned SaaS applications, is now available globally with the launch of new data centers in Europe and Asia. This global expansion also introduces enhanced data leakage prevention (DLP) and machine learning capabilities for documents written in native regional languages, such as German and Japanese. Furthermore, Prisma SaaS has added support for complete automation of policy violations, enabling our customers to remediate large volumes of risk with minimal overhead. 

Our integrated platform provides detailed SaaS visibility and granular control, data governance, automated risk remediation, and malware prevention, so organizations can achieve complete SaaS protection.

Related Links:

  • Press Release: Palo Alto Networks Extends Safe Application Enablement and Breach Prevention From the Network to the Cloud with Enhancements to Its Next-Generation Security Platform
  • Innovation Page: Securely Enabling SaaS Adoption
  • Prisma SaaS
  • Features Introduced in PAN-OS 8.0

Preventing Credential-Based Attacks

The theft and use of stolen passwords is one of the oldest attacks in the book, yet it remains highly effective. With stolen credentials, an adversary can bypass the entire attack lifecycle by impersonating a valid user, move uninterrupted throughout the organization's network, and shift to the abuse of credentials from within.

PAN-OS 8.0 neutralizes credential theft by providing prevention capabilities across the attack lifecycle to stop the theft and subsequent abuse of stolen credentials.

The platform identifies and prevents attempts to steal credentials by stopping the submission of valid corporate credentials to illegitimate websites, and neutralizes an attacker’s ability to use stolen credentials for lateral movement and network compromise by enforcing authentication policies at the network layer.

Related Links:

  • Press Release: Palo Alto Networks Delivers Industry-First Capabilities to Prevent Credential Theft and Abuse
  • Innovation Page: Preventing Credential-Based Attacks
  • Features Introduced in PAN-OS 8.0

Multi-Method Threat Prevention Innovations

To stay ahead of increasingly sophisticated adversaries, PAN-OS 8.0 introduces several industry-first innovations that drive forward our ability to detect and prevent the most evasive threats, block command-and-control traffic in far more effective ways, and allow our customers to gain leverage from any threat intelligence source, including:

  • WildFire™ service has an all-new anti-evasion analysis engine that brings together the benefit of multiple independent detection techniques:
    • New machine learning that operates on thousands of extracted features to further the WildFire service's ability to detect more malware and variants while maintaining high accuracy.
    • An entirely new malware analysis environment, custom built from the ground up without any dependency on open-source emulation tools used throughout the industry that are readily identifiable by the adversary.
    • An innovative bare-metal execution environment where suspicious, evasive files are dynamically steered for detonation on real hardware systems, enabling detection for the most evasive anti-VM threats.

  • Advancing command-and-control (C2) prevention by introducing end-to-end automation of the generation, delivery and enforcement of payload-based C2 protections, based on data from WildFire customers. This system eliminates the trade-off between quick automated protections, based on URL or DNS, and effective, but low-scale manual signature creation that was the status quo in the security industry.

  • Extending AutoFocus™ contextual threat intelligence service with the MineMeld application, enabling security teams to aggregate, correlate, and automatically turn any third-party threat intelligence source into prevention across the Palo Alto Networks Next-Generation Security Platform.

Related Links:

  • Press Release: Palo Alto Networks Raises Bar with New Threat Prevention Capabilities for Its Next-Generation Security Platform
  • Innovation Page: Multi-Method Threat Prevention
  • AutoFocus
  • GlobalProtect
  • Threat Prevention
  • URL Filtering PAN-DB
  • WildFire
  • Features Introduced in PAN-OS 8.0

High-Performance, Intelligent, Centralized Management

The most innovative, advanced technology loses value if not managed effectively. The Panorama™ network security management 8.0 release introduces new capabilities that provide organizations with access to the richest, most comprehensive set of actionable data from the network as well as from the endpoints secured by Palo Alto Networks Traps™ advanced endpoint protection or from other third-party sources in the future. Combined with complete network visibility and increased automation, organizations are able to streamline management workflows and focus on the issues that matter most.

Related Links:

  • Innovation Page: High-Performance, Intelligent, Centralized Management
  • Panorama
  • Features Introduced in PAN-OS 8.0

New Family of Breakthrough Performance Hardware

The increasing use of encrypted traffic and rapid consumption of cloud-based applications, coupled with ever-increasing data center consolidation, are driving new processing power, performance and capacity requirements. Powered by PAN-OS 8.0, the new hardware appliances help deliver next generation of security capabilities anywhere in the network including datacenter cores, enterprise perimeters, as well as branch and remote offices.

Related Links:

  • Press Release: Palo Alto Networks Expands Range of Next-Generation Firewall Devices with New Hardware and Virtual Appliances
  • Innovation Page: New Family of Breakthrough Performance Hardware
  • Next-Generation Firewall
  • Compare Firewalls
  • Features Introduced in PAN-OS 8.0

Simplifying User-ID Deployments at Scale

User-ID™ technology, a standard feature on Palo Alto Networks next-generation firewalls, enables you to leverage user information stored in a wide range of repositories. PAN-OS 8.0 introduces powerful enhancements that make it easier for organizations of all sizes to control access to their resources based on user identity. By ensuring that only the right users have access to the right resources at all times, User-ID mitigates problems associated with identity theft and helps prevent modern-day breaches.

Related Links:

  • Innovation Page: User Identity-Based Security: Intelligent, Safe and Simple
  • User-ID
  • Features Introduced in PAN-OS 8.0

Security for Service Providers

The expanded line of virtual network functions (VNFs) or VM-Series Firewalls provides new capabilities and increased performance to service providers with deployment flexibility, agility and scalability to support an expanded range of deployment scenarios. 

  • Managed security service providers (MSSPs) can leverage a broader portfolio of VNFs to expand their business across multiple enterprise virtualized CPE (vCPE) use cases.
  • Mobile network operators (MNOs) can leverage VNFs with high performance and scalability to support various core network virtualization (NFV/SDN) scenarios.

Related Links:

  • Innovation Page: Security for Service Providers
  • Managed Security Service Providers
  • Features Introduced in PAN-OS 8.0

 


Technology Integration With Palo Alto Networks

PAN-OS 8.0 provides capabilities to better enable our tech partners to integrate with and take advantage of our Next-Generation Security Platform. These partnerships extend our platform with new log filtering and logging capabilities, SAML support and third-party threat intelligence integrations with the new MineMeld application for AutoFocus. 

Related Links:

  • Innovation Page: Technology Integration with 3rd Parties
  • Technology Partners
  • Features Introduced in PAN-OS 8.0

Get the latest news, invites to events, and threat alerts

By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement.

Products and Services

  • AI-Powered Network Security Platform
  • Secure AI by Design
  • Prisma AIRS
  • AI Access Security
  • Cloud Delivered Security Services
  • Advanced Threat Prevention
  • Advanced URL Filtering
  • Advanced WildFire
  • Advanced DNS Security
  • Enterprise Data Loss Prevention
  • Enterprise IoT Security
  • Medical IoT Security
  • Industrial OT Security
  • SaaS Security
  • Next-Generation Firewalls
  • Hardware Firewalls
  • Software Firewalls
  • Strata Cloud Manager
  • SD-WAN for NGFW
  • PAN-OS
  • Panorama
  • Secure Access Service Edge
  • Prisma SASE
  • Application Acceleration
  • Autonomous Digital Experience Management
  • Enterprise DLP
  • Prisma Access
  • Prisma Access Browser
  • Prisma SD-WAN
  • Remote Browser Isolation
  • SaaS Security
  • AI-Driven Security Operations Platform
  • Cloud Security
  • Cortex Cloud
  • Application Security
  • Cloud Posture Security
  • Cloud Runtime Security
  • Prisma Cloud
  • AI-Driven SOC
  • Cortex XSIAM
  • Cortex XDR
  • Cortex XSOAR
  • Cortex Xpanse
  • Unit 42 Managed Detection & Response
  • Managed XSIAM
  • Threat Intel and Incident Response Services
  • Proactive Assessments
  • Incident Response
  • Transform Your Security Strategy
  • Discover Threat Intelligence

Company

  • About Us
  • Careers
  • Contact Us
  • Corporate Responsibility
  • Customers
  • Investor Relations
  • Location
  • Newsroom

Popular Links

  • Blog
  • Communities
  • Content Library
  • Cyberpedia
  • Event Center
  • Manage Email Preferences
  • Products A-Z
  • Product Certifications
  • Report a Vulnerability
  • Sitemap
  • Tech Docs
  • Unit 42
  • Do Not Sell or Share My Personal Information
PAN logo
  • Privacy
  • Trust Center
  • Terms of Use
  • Documents

Copyright © 2025 Palo Alto Networks. All Rights Reserved

  • Youtube
  • Podcast
  • Facebook
  • LinkedIn
  • Twitter
  • Select your language