Palo Alto Networks Logo

Cloud NGFW Credit Estimator

(For Cloud NGFW for AWS and Cloud NGFW for Azure)

AWSAWS
AzureAzure
Close
Software NGFW Credits vs. Legacy Credits
Palo Alto Networks has transitioned to a unified credit system to streamline resource management. While Legacy Cloud NGFW Credits map at a direct 1:1 ratio to your firewall usage, the new unified Software NGFW Credits operate on a different conversion ratio that dynamically accounts for both base usage and support tier overhead.
This unified system consolidates your purchasing into a single, highly flexible pool, allowing you to seamlessly share capacity across self-managed virtual firewalls (VM-Series) and cloud-managed Cloud NGFW services as your deployment needs evolve.
Note: Legacy Cloud NGFW credits are still available to view and estimate in the calculator as needed.
Software NGFW (VM-Flex)Cloud NGFW (Legacy)
Close
Our AWS offerings utilize structured SKUs to seamlessly handle scale-heavy security topologies and support next-generation defenses:
Standard vs. Base SKUs: Both the Standard and Base SKUs feature the exact same pricing. However, we highly recommend utilizing the Standard SKU for your deployments, as it is designed to offer greater flexibility and support for new capabilities moving forward.
Premium SKU: Designed to provide enhanced capacity for the most demanding throughput requirements and complex security architectures.
Optimized for Advanced AI Defenses: The Standard and Premium tiers are purpose-built to support our most robust AI-driven security add-ons, including Advanced WildFire (leveraging Precision AI to block zero-day malware) and Advanced DNS Security (stopping evasive shadow domains).
Base/StandardPremium
Base/Standard: $1.50/hr | Premium: $3.00/hr
Deployment Hourly Charges
Close
The number of NGFW Resources depends on how many AWS regions you will deploy in and the deployment model (centralized or distributed). Click on the links below to learn more.
Supported Regions
Deployment Models
You may have deployed your application resources in multiple Availability zones (AZs) to ensure that your application remains available and continues to operate even in the face of disruptions or failures.
You need to configure the Cloud NGFW resource to span the same Availability Zones for maintaining zone-affinity. There's no additional cost for configuring the Cloud NGFW resource to span up to three Availability Zones (AZs).
As the traffic volume increases in any Availability zone, Cloud NGFW resource accordingly creates more VM-Series nodes in that availability zone.
Security Services
Close
Cloud-delivered security services: Consistent, scaled security without added infrastructure. Advanced services are billed per resource based on the configuration.

Click on the links below to learn more.
Advanced Threat Prevention (ATP)
Advanced URL Filtering
Advanced Wildfire
Advanced DNS Security
Enterprise DLP
Close
This is the traffic secured per tenant, across all of your Cloud NGFW resources.
Additional Options
Number of CNGFW managed EIPs
Close
As a general rule of thumb, please ensure you have at least one public IP address for every Gbps of traffic you plan to send via the NGFW resource.
Pricing Summary
(PAY-AS-YOU-GO)

$0
Monthly
Show Calculation
PRODUCT CREDITS
(for deployment profile)

0 Credits
Close
When utilizing unified Software NGFW (VM-Flex) credits, your selected Support Tier (such as Premium or Standard) is calculated and billed as an additional overhead percentage on top of your base firewall deployment.
To ensure complete transparency when scoping your environment, the calculator breaks this down into two distinct views:
Product Credits: This reflects the exact number of credits required to actively provision and operate your firewall resources, instances, and security add-ons within your cloud deployment profile.
Total Credits to Purchase: This highlights the grand total of credits you actually need to procure. It automatically calculates your Product Credits plus the necessary support tier overhead required to maintain your contract.
TOTAL CREDITS TO PURCHASE

0 Credits
(product credits + support)
Show Calculation
Try Cloud NGFW for AWS Today
Start Your Free Trial
Contact Palo Alto Networks for private pricing and formal quotes.
Disclaimer: This estimate is for planning purposes only. Your actual costs may vary.