***** Palo Alto Networks NGFW is now available as a managed cloud service on AWS *****
Palo Alto Networks recently introduced Cloud NGFW, a managed Next-Generation Firewall (NGFW) service designed to simplify securing AWS deployments. See the Cloud NGFW Marketplace listing to learn more and subscribe: https://aws.amazon.com/marketplace/pp/prodview-sdwivzp5q76f4

The VM-Series Next-Generation Firewall allows developers and cloud security architects to embed inline threat and data loss prevention into their application development workflows. Native AWS services combined with VM-Series automation features enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.

Bundle 2 includes Threat Prevention (IDS/IPS), URL Filtering, WildFire, GlobalProtect, DNS Security subscriptions, and Premium Support. Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policies that are consistent with on-premises environments. VM-Series now supports DPDK on the C5, C5n, M5, and M5n instances, running on the AWS Nitro System, to efficiently process traffic and offer increased performance.