OEM partner
Palo Alto Networks
Next-generation firewalls and cloud security
Palo Alto Networks platforms are central to the cybersecurity and compliance work we deliver, from perimeter firewalls to cloud and endpoint security.
Part of our IT and digital services work.
PA-Series next-generation firewalls — pick by deployment size
Within PA-Series next-generation firewalls, here's roughly where each tier fits. Exact model and configuration are confirmed when you request a quote.
Small / branch
PA-400 Series
Compact firewall for a small office or branch internet edge.
Enterprise / campus
PA-3400 Series
Mid-size firewall for a campus or regional-office internet edge.
Data center / high-throughput
PA-5400–PA-7000 Series
High-throughput firewalls for data center and campus core deployments.
Palo Alto Networks product families we work with
PA-Series next-generation firewalls
Branch to enterpriseHardware and virtual firewalls with application-aware inspection.
- Ranges from small-branch to high-throughput data-center models
- Application-aware inspection, not just port and protocol filtering
- Centralized policy management (Panorama) across multiple firewalls
Best for: Businesses needing a firewall sized precisely to their site, not oversized.
Prisma Cloud security
Cloud / EnterpriseCloud-native security posture management across public cloud accounts.
- Visibility and posture management across cloud accounts
- Covers misconfigurations before they become incidents
- Works across AWS, Azure and other major cloud providers
Best for: Businesses running meaningful workloads on AWS, Azure or similar.
Prisma Access SASE / SD-WAN
Branch / Remote workforceSecure access service edge for remote users and branch sites.
- Consistent security policy for remote users and branch sites alike
- Combines SD-WAN connectivity with cloud-delivered security
- Reduces reliance on backhauling branch traffic through HQ
Best for: Businesses with a distributed or hybrid-remote workforce.
Cortex endpoint and XDR
EnterpriseEndpoint protection with extended detection and response.
- Endpoint protection beyond traditional antivirus
- Correlates signals across endpoint, network and cloud
- Built for active threat investigation, not just alerting
Best for: Businesses wanting active detection and response, not just alerts.
Why source Palo Alto Networks through Tanrova Rise
- We size the firewall tier to your user count and throughput need, not the biggest box available.
- Policy design and change management included, not left as a post-install exercise.
- Security monitoring continues after go-live as part of our cybersecurity and compliance service.
Palo Alto Networks — frequently asked questions
- What Palo Alto firewall size does a 20-50 user office need?
- At that headcount you're typically in the smaller PA-Series branch tier, but the real driver is your internet bandwidth and how many simultaneous VPN or remote-access sessions you need — not user count alone. Tell us both and we'll size it, not quote from headcount alone.
- Do we need Prisma Cloud if we already have a firewall?
- A firewall protects your network perimeter; Prisma Cloud addresses misconfigurations and risk inside your cloud accounts (AWS, Azure, etc.), which a perimeter firewall doesn't see. They solve different problems and are commonly run together once you have real cloud workloads.
- How often does firewall policy need to be reviewed?
- At minimum whenever your network, staff or application footprint changes meaningfully — stale firewall rules are a common, quietly growing security gap. We include policy review as part of our cybersecurity and compliance work.