Strata Cloud Manager (SCM) offers a cloud-based unified management plane for both NGFWs and Prisma Access, enabling consistent policy enforcement, simplified management, and AI- driven operational insights.
Strata Cloud Manager provides a single interface for unified management of NGFWs and Prisma Access, leveraging AI to optimize security operations and streamline workflows.
Unlike Panorama, which is an on-premises management solution, SCM delivers cloud-based, AI- driven capabilities for centralized oversight.

SSL Inbound Inspection allows the firewall to decrypt incoming encrypted traffic to internal servers (e.g., web servers) by acting as a man-in-the-middle (MITM). The firewall uses the private key of the server to decrypt the session and apply security policies before re-encrypting the traffic.
SSL Inbound Inspection requires you to import the server's private key and certificate into the firewall. The firewall then acts as a man-in-the-middle (MITM) to decrypt inbound sessions from external clients to internal servers for inspection.

Cloud NGFW for AWS can be configured using Panorama for centralized management, as well as the AWS management console for native integration and configuration.
You can configure Cloud NGFW for AWS using Panorama for centralized security management, or directly through the AWS management console to deploy and manage security services for your AWS resources.

Palo Alto Networks requires upgrading to the next major feature release before moving to newer releases. This ensures stability and compatibility.
When upgrading across multiple major PAN-OS releases, you must upgrade to each intermediate major feature release. Skipping major releases is not supported.

Protecting against malicious and misconfigured domains requires two critical services:
Advanced Threat Prevention
Provides signature-based and advanced analysis to identify threats, including DNS-based attacks.
Advanced Threat Prevention enables the NGFW to detect and prevent exploits and malware- based communications, including those leveraging DNS.
Advanced DNS Security
Specifically designed to detect and sinkhole malicious and misconfigured DNS queries.
DNS Security uses real-time intelligence to block DNS-based threats, protect against data exfiltration, and automatically sinkhole suspicious domain lookups.
By combining these services in security policies, NGFWs ensure robust protection against domain- based threats and misconfigurations.