* [Blog](https://www2.paloaltonetworks.com/blog)
* [Palo Alto Networks](https://www2.paloaltonetworks.com/blog/corporate/)
* [Next-Generation Firewalls](https://www2.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/)
* Paradigm Shift: The World...

# Paradigm Shift: The World's First ML-Powered NGFW with PAN-OS 10.0

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2020%2F06%2Fnetwork-pan-os-10-0%2F)  
[](https://twitter.com/share?text=Paradigm+Shift%3A+The+World%E2%80%99s+First+ML-Powered+NGFW+with+PAN-OS+10.0&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2020%2F06%2Fnetwork-pan-os-10-0%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2020%2F06%2Fnetwork-pan-os-10-0%2F&title=Paradigm+Shift%3A+The+World%E2%80%99s+First+ML-Powered+NGFW+with+PAN-OS+10.0&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/2020/06/network-pan-os-10-0/&ts=markdown)  
\[\](mailto:?subject=Paradigm Shift: The World’s First ML-Powered NGFW with PAN-OS 10.0)  
Link copied  
By [Lee Klarich](https://www.paloaltonetworks.com/blog/author/lee-klarich/?ts=markdown "Posts by Lee Klarich")  
Jun 17, 2020  
4 minutes  
[Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)  
[Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)  
[Firewall](https://www.paloaltonetworks.com/blog/tag/firewall/?ts=markdown)  
[IOT security](https://www.paloaltonetworks.com/blog/tag/iot-security/?ts=markdown)  
[Machine Learning](https://www.paloaltonetworks.com/blog/tag/machine-learning/?ts=markdown)  
[network security](https://www.paloaltonetworks.com/blog/tag/network-security/?ts=markdown)  
[NGFW](https://www.paloaltonetworks.com/blog/tag/ngfw/?ts=markdown)  
[PAN-OS](https://www.paloaltonetworks.com/blog/tag/pan-os/?ts=markdown)

Over the last 10 years, the network security industry has focused on reducing the time it takes to react to new attacks. The time required to create a signature and update all network security systems with it has been reduced from weeks to days to hours, and in our case, even to minutes. However, cybercriminals don't stay still. Attacks are continuously and automatically morphing and evading signature based detection techniques.

New IoT devices are being added to your network and their numbers are increasing rapidly without notice. Waiting for fingerprints to be created in order to identify and secure each new IoT device is yet another reactive technique that creates an unacceptable gap in your security.

To add to this complexity, enterprise networks are widening -- with hybrid clouds, IoT devices and a remote workforce -- and increasing the attack surface. It simply isn't possible for security administrators to keep security policy changes up to date fast enough using manual methods.

Reactive security can't keep up. A paradigm shift in cybersecurity is needed. Network security needs to become proactive. The world needs a new type of Next-Generation Firewall (NGFW) that:

* Helps stop new threats by embedding machine learning (ML) in the core of the firewall to provide real-time signatureless attack prevention.
* Identifies new IoT devices with ML and behavior-based identification, removing the dependence on fingerprints.
* Uses cloud-based CPU- and data-intensive ML processing to detect the most sophisticated attacks in near real time.
* Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW to stop attacks and reconfigure policies.
* Continuously collects telemetry to enable cloud-based CPU and data intensive ML processes, which then recommends policy changes to optimize security utilization and outcomes.

## **Introducing the World's First ML-Powered NGFW**

Today, Palo Alto Networks disrupts the industry once again by introducing the world's first ML-Powered Next-Generation Firewall. This is a paradigm shift in network security that enables you to stay ahead of unknown threats, see everything, including IoT, and reduce errors with automatic policy recommendations.

## **How Machine Learning Delivers Stronger Cybersecurity**

#### Prevent:

**ML-Based Inline Malware and Phishing Prevention**

Trying to reduce the time it takes to create and distribute new signatures to combat attacks that use machines and automatically morph is unproductive. In a completely new approach, our ML-Powered NGFW uses machine learning models to identify variants of known attacks as well as many unknown cyberthreats so you are able to prevent up to 95% of zero-day malware inline.

**Zero-Delay Signature Updates**

With this release, we're introducing near-real-time protection with zero-delay signature updates.

#### Detect:

**ML-Based Integrated IoT Security**

To keep your network fully protected, every new [IoT device](https://start.paloaltonetworks.com/unit-42-iot-threat-report) added needs to be manually monitored, and your network security must be updated with that device's fingerprint. During the time it takes to identify devices and make updates to the network, your organization is at risk. The [new IoT Security subscription](https://paloaltonetworks.com/network-security/iot-security) for the NGFW provides complete device visibility, behavioral anomaly detection and native enforcement to [secure IoT devices](https://www.paloaltonetworks.com/blog/2020/06/network-iot-security) without the need for additional sensors or infrastructure.

#### Improve:

**ML-Based Security Policy**

As it collects a wide variety of telemetry information from the network, the ML-Powered NGFW will recommend appropriate security policies. With PAN-OS 10.0 and IoT Security, customers will be able to view and adopt the IoT Security policy recommendations for safe device behavior. This will save time, reduce the chance of human error and help secure IoT devices.

## **Additional Innovations in PAN-OS 10.0**

In addition, PAN-OS 10.0 introduces the [CN-Series](https://paloaltonetworks.com/network-security/cn-series), the industry's first ML-powered, [next-generation firewall built specifically for Kubernetes](https://www.paloaltonetworks.com/blog/2020/06/network-cn-series/) environments to provide security and compliance for your Kubernetes container environment.

Every single security service has been enhanced, including Snort support in Threat Prevention, new DNS Security categories with deep visibility, and more.

I continually hear from our customers that they love our forward-looking approach in anticipating their cybersecurity needs. The 70+ innovative new capabilities in this release, including easier decryption, high availability clustering and a new high-performance hardware card redefine the standard for network security so you don't just keep up but stay ahead.

Welcome to the era of intelligent security -- protecting your enterprise from the threats of tomorrow. Learn more about [PAN-OS 10.0](https://paloaltonetworks.com/products/new/pan-os).

##### **Intelligent Network Security: LinkedIn Live Broadcast.**

AJ Shipley, vice president of product, and Paul Calatayud, Americas CSO, appeared on LinkedIn Live to answer questions about the industry's first ML-Powered NGFW. [Watch the event on-demand](https://www.linkedin.com/video/live/urn:li:ugcPost:6681933905844584448/).

*** ** * ** ***

## Related Blogs

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### PAN-OS 10.0 for the World's First ML-Powered NGFW Now Available](https://www2.paloaltonetworks.com/blog/2020/07/network-ml-powered-ngfw/)

### [IoT Security](https://www.paloaltonetworks.com/blog/network-security/category/iot-security/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### Announcing IoT Security: No Organization Is Protected Without It](https://www2.paloaltonetworks.com/blog/2020/06/network-iot-security/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)

[#### Now Available: WildFire Cloud Location in Australia](https://www2.paloaltonetworks.com/blog/network-security/now-available-wildfire-cloud-location-in-australia/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### Advances in Decryption with PAN-OS 10.0](https://www2.paloaltonetworks.com/blog/2020/08/network-advances-in-decryption/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Secure the Cloud](https://www.paloaltonetworks.com/blog/category/secure-the-cloud/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### CN-Series Firewalls: Comprehensive Network Security for Kubernetes](https://www2.paloaltonetworks.com/blog/2020/07/network-cn-series-firewalls/)

### [Hybrid Cloud Data Center](https://www.paloaltonetworks.com/blog/network-security/category/hybrid-cloud-data-center/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Secure the Cloud](https://www.paloaltonetworks.com/blog/category/secure-the-cloud/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### Announcing CN-Series: The Industry's First NGFW for Kubernetes](https://www2.paloaltonetworks.com/blog/2020/06/network-cn-series/)

### Subscribe to the Blog!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language