* [Blog](https://www2.paloaltonetworks.com/blog)
* [Palo Alto Networks](https://www2.paloaltonetworks.com/blog/corporate/)
* [Next-Generation Firewalls](https://www2.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/)
* Fundamentally Changing Ne...

# Fundamentally Changing Network Security with Inline Deep Learning

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2022%2F02%2Finline-deep-learning%2F)  
[](https://twitter.com/share?text=Fundamentally+Changing+Network+Security+with+Inline+Deep+Learning&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2022%2F02%2Finline-deep-learning%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2022%2F02%2Finline-deep-learning%2F&title=Fundamentally+Changing+Network+Security+with+Inline+Deep+Learning&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/2022/02/inline-deep-learning/&ts=markdown)  
\[\](mailto:?subject=Fundamentally Changing Network Security with Inline Deep Learning)  
Link copied  
By [Lee Klarich](https://www.paloaltonetworks.com/blog/author/lee-klarich/?ts=markdown "Posts by Lee Klarich")  
Feb 17, 2022  
5 minutes  
[Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)  
[Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown)  
[Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)  
[Zero Trust Security](https://www.paloaltonetworks.com/blog/network-security/category/zero-trust-security/?ts=markdown)  
[deep learning](https://www.paloaltonetworks.com/blog/tag/deep-learning/?ts=markdown)  
[Nebula](https://www.paloaltonetworks.com/blog/tag/nebula/?ts=markdown)  
[NGFW](https://www.paloaltonetworks.com/blog/tag/ngfw/?ts=markdown)  
[zero-day](https://www.paloaltonetworks.com/blog/tag/zero-day/?ts=markdown)

This post is also available in: [日本語 (Japanese)](https://www2.paloaltonetworks.com/blog/2022/03/inline-deep-learning/?lang=ja "Switch to Japanese(日本語)")

When the ILOVEYOU virus hit in 2000, it was a simpler time: organizations knew when they had it and when it was gone. They also knew another attack wouldn't come around for a year or so because, at that time, that's generally how long it took bad actors to come up with something new. 20+ years later, we almost long for this type of virus... *almost*.

In those days, most cyberattacks could be prevented by signatures that detected known attacks. This was quite effective as many attacks tended to be variations of one another. Net-new attacks were rare, and generally only more capable, well-funded groups could launch them. In this landscape, defending against a zero-day attack was a reactive process, set into motion only after the initial target was impacted. Over many years, the industry focused on shortening the time it took to react to a new attack, from weeks to days to hours, and in our case even minutes. But, we need to do more.

The cyberthreat landscape continues to change. This has been true for as long as it has existed, but we've reached a new pinnacle. Bad actors of all kinds now have a powerful arsenal of nation state-level attacks at their fingertips. As a result, uniquely advanced (as well as previously rare and highly targeted) attacks are now rampant. Unfortunately, these days, every organization must assume they will be the target of a sophisticated attack.

But, there is good news: this problem is solvable. And, not just in theory. What's common about these new attacks is that it is actually possible to both detect and stop them *before* they successfully compromise a target -- with inline deep learning.

## Inline Deep Learning Stops Zero-Day Threats

With Nebula (PAN-OS 10.2), the latest upgrade of our industry-leading PAN-OS software, we've brought deep learning (one of the most advanced forms of machine learning) inline. In doing so, we are solving a challenge that many thought was unsolvable -- stopping zero day attacks without prior knowledge of the attack.

For context, using deep learning in security is definitely not new. In fact, we've been utilizing it for several years, but it was previously limited to out-of-band applications because inline detection and prevention has to be super fast. This is very difficult because it is computationally intensive. We've solved this issue by utilizing a unique cloud delivery mechanism. This brand new, industry-first approach to network security fundamentally changes network security. In fact, we believe that this is how all network security will be done in the future. Here are just a couple examples:

* Cobalt Strike has become a go-to tool for hackers because of its endless customizability, which also makes it very easy to obscure command-and-control (C2) operations. With inline deep learning, we are able to provide strong protection (nearly 100%) for one of the most difficult to detect Cobalt Strike C2 techniques in use today, in addition to many other types of evasive and unknown C2.
* Successful phishing attacks have increased with hybrid work and phishing-as-a-service. 90% of phishing services now come with built-in evasive techniques. With Advanced URL Filtering, we've extended real-time analysis to all web content and added additional phishing detectors, enabling us to stop 40% more phishing attacks.

And this is just the start. One of the great aspects of deep learning is that the models constantly improve as more and more data is analyzed.

We laid the foundation for this innovation with the introduction of the [ML-Powered Next Generation Firewall](https://www.paloaltonetworks.com/blog/2020/06/network-pan-os-10-0/) (NGFW). By taking our machine learning capabilities and bringing them inline as part of the PAN-OS, we were able to prevent up to 95% of never-before-seen malware. Intertwining analytics into network security by pushing protections as deep into the stack as possible for efficiency was a critical, foundational step toward defending against zero-day attacks as they attempt to break in (not afterwards). With the Nebula release, we have even more powerful tools to use against a broader range of attacks. And I bet you thought the term "ML-Powered NGFW" was just hype.

## Additional Innovations in PAN-OS 10.2 Nebula

There is a ton of amazing innovation in our new release, including enhancement of the industry's smartest security for IoT devices and our 10th security service, AIOps, which uses machine learning to predict up to 51% of disruptions to your NGFWs *before* they are impactful. Further, we've introduced the fourth generation of our ML-Powered NGFWs with PA-3400 and PA-5400 Series. These new ML-Powered NGFWs join our other fourth generation PA-400 Series and PA-5450 NGFWs to provide unprecedented protection for the data center, campus, branch and enterprise edge.

You can read about what's new on our [PAN-OS 10.2 Nebula page](https://www.paloaltonetworks.com/network-security/whats-new-in-nebula), or [register for our live launch event](https://start.paloaltonetworks.com/nebula) to get an in-depth tour of the features and benefits that make Nebula an enormous leap in network security.

*** ** * ** ***

## Related Blogs

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Revolutionize Firewall Operations with Industry First AIOps for NGFW](https://www2.paloaltonetworks.com/blog/2022/03/industry-first-aiops-for-ngfw/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Network Security Innovation and Prevention with PAN-OS 10.2 Nebula](https://www2.paloaltonetworks.com/blog/2022/03/network-security-innovation-and-prevention/)

### [Points of View](https://www.paloaltonetworks.com/blog/category/points-of-view/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Palo Alto Networks and Coordinated Enforcement for Malware](https://www2.paloaltonetworks.com/blog/2022/06/coordinated-enforcement-for-malware/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Network Perimeter](https://www.paloaltonetworks.com/blog/network-security/category/network-perimeter/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Stop Zero-Day Threats in Zero Time with Nebula](https://www2.paloaltonetworks.com/blog/2022/02/stop-zero-day-threats-with-nebula/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Get 3x Faster Security with 4th Generation Palo Alto Networks NGFWs](https://www2.paloaltonetworks.com/blog/2022/02/faster-security-with-4th-generation-ngfws/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Enterprise \& Branch Security with Palo Alto Networks New NGFWs](https://www2.paloaltonetworks.com/blog/network-security/enterprise-branch-security-with-palo-alto-networks-new-ngfws/)

### Subscribe to the Blog!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language