Cloud NGFW for AWS/Azure Estimator

Select AWS or Azure

AWSAWS

AzureAzure

Select Credit Type

Software NGFWSoftware NGFWCloud NGFW (Legacy)Cloud NGFW (Legacy)

Select SKU Tier

BaseStandardPremium

Base: $1.50/hr | Standard: $1.50/hr | Premium: $3.00/hr

Select SKU Tier

BasePremium

Base: $1.25/hr | Premium: $2.00/hr

Deployment Hourly Charges

NUMBER OF NGFW RESOURCES

The number of NGFW Resources depends on how many Azure regions in which you will deploy and the deployment model (centralized or distributed). Click on the links below to learn more.

Supported Regions

Deployment Models

The number of NGFW Resources depends on how many AWS regions you will deploy in and the deployment model (centralized or distributed). Click on the links below to learn more.

Supported Regions

Deployment Models

You may have deployed your application resources in multiple Availability zones (AZs) to ensure that your application remains available and continues to operate even in the face of disruptions or failures.

You need to configure the Cloud NGFW resource to span the same Availability Zones for maintaining zone-affinity. There's no additional cost for configuring the Cloud NGFW resource to span up to three Availability Zones (AZs).

As the traffic volume increases in any Availability zone, Cloud NGFW resource accordingly creates more VM-Series nodes in that availability zone.

Security Services

Cloud-delivered security services: Consistent, scaled security without added infrastructure. Advanced services are billed per resource based on the configuration.

Click on the links below to learn more.

Advanced Threat Prevention (ATP)

Advanced URL Filtering

Advanced Wildfire

Advanced DNS Security

Enterprise DLP

Advanced Threat Prevention

Advanced URL Filtering

Advanced WildFire

Advanced DNS Security

Enterprise DLP

TRAFFIC SECURED PER MONTH (GB)

This is the traffic secured per tenant, across all of your Cloud NGFW resources.

Additional Options

Centralized Management (Panorama)

Usage of security services and centralized management are billed using the Add-Ons dimension. Click on the links below to learn more.

Azure Pricing

AWS Pricing

Centralized Management (Panorama Integration)

Premium Support is available from Palo Alto Networks customer support at no additional cost. To receive support, customers must register at Palo Alto Networks Support Portal through the Cloud NGFW service. More details about the support services can be found in the Palo Alto Networks EUSA.

Centralized Management (Strata Cloud Manager)

Cloud NGFW is supported with SCM Pro. This calculator will provide a credit estimator with SCM Pro licensing. Note: SCM Pro includes SLS hence SLS is not added as a separate selection for Calculation.

Click on the links below to learn more.

SCM Pro

Additional Availability Zones

Cloud NGFW resources can be configured to span up to three Availability Zones at no extra cost. There's additional cost for configuring Cloud NGFW resources to span to more than three Availability Zones (AZs). As the traffic volume increases in any Availability zone, Cloud NGFW accordingly creates more VM-Series nodes in that availability zone.

Egress NAT

For more information about Palo Alto Egress Traffic NAT select the link below.

Cloud NGFW for AWS - Egress Traffic NAT

Bring Your Own IP

For more information about the Bring Your Own IP option, select the link below.

Bring Your Own IP

Cloud NGFW Managed AWS EIPs

For more information about the Cloud NGFW Managed AWS EIPs option, select the link below.

Cloud NGFW Managed AWS EIPs

Number of CNGFW managed EIPs

As a general rule of thumb, please ensure you have at least one public IP address for every Gbps of traffic you plan to send via the NGFW resource.

Cloud NGFW Credit Estimator

(For Cloud NGFW for AWS and Cloud NGFW for Azure)

Cloud NGFW Credit Estimator

(For Cloud NGFW for AWS)