App-ID identifies and controls applications independently of port by combining application signatures, protocol decoding, and heuristic analysis. These techniques allow the firewall to accurately recognize application behavior even when applications use nonstandard ports or attempt to evade detection.

A decryption profile contains the SSL/TLS protocol settings and security checks used during traffic decryption. It provides the capability to identify and log SSL/TLS traffic using post-quantum cryptography (PQC) algorithms, enabling the NGFW to monitor and enforce policy requirements for such connections.

The VM-Series NGFWs are designed to integrate seamlessly with both Panorama and Strata Cloud Manager (SCM), allowing administrators to manage physical and virtual firewall deployments from either interface.
You can manage VM-Series Next-Generation Firewalls using either Panorama for centralized management of all firewalls or Strata Cloud Manager for cloud-based management, giving flexibility across hybrid environments.
Unified management flexibility is key for enterprises with hybrid or multi-cloud deployments.

App-ID Cloud Engine (ACE) in SaaS Security uses cloud-based signatures to detect unknown and unsanctioned SaaS applications in the environment.
App-ID Cloud Engine (ACE) uses real-time cloud intelligence to identify SaaS applications, including previously unknown or newly introduced applications.
This feature is key for comprehensive SaaS visibility beyond static signatures.

The Machine Learning (ML) security profile provides real-time protection by detecting malicious domains and abnormal behavior caused by DNS misconfigurations or exploitation.