* [Blog](https://origin-researchcenter.paloaltonetworks.com/blog) * [Network Security](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/) * Automated Multicloud Secu... # Automated Multicloud Security for Software Firewalls [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fautomated-multicloud-security-for-software-firewalls%2F) [](https://twitter.com/share?text=Automated+Multicloud+Security+for+Software+Firewalls&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fautomated-multicloud-security-for-software-firewalls%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fautomated-multicloud-security-for-software-firewalls%2F&title=Automated+Multicloud+Security+for+Software+Firewalls&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://origin-researchcenter.paloaltonetworks.com/blog/network-security/automated-multicloud-security-for-software-firewalls/&ts=markdown) \[\](mailto:?subject=Automated Multicloud Security for Software Firewalls) Link copied By [Nirmeet Bhogill](https://www.paloaltonetworks.com/blog/author/nirmeet-bhogill/?ts=markdown "Posts by Nirmeet Bhogill") and [Geetha Anandakrishnan](https://www.paloaltonetworks.com/blog/author/geetha-anandakrishnan/?ts=markdown "Posts by Geetha Anandakrishnan") Nov 06, 2026 5 minutes [CLARA](https://www.paloaltonetworks.com/blog/tag/clara/?ts=markdown) [Multicloud](https://www.paloaltonetworks.com/blog/tag/multicloud/?ts=markdown) [multicloud security fabric](https://www.paloaltonetworks.com/blog/tag/multicloud-security-fabric/?ts=markdown) [Network Security](https://www.paloaltonetworks.com/blog/tag/network-security/?ts=markdown) [software firewalls](https://www.paloaltonetworks.com/blog/tag/software-firewalls/?ts=markdown) For today's enterprise, enabling business innovation across multicloud and AI environments means grappling with unprecedented complexity. A primary challenge is securely connecting workloads and data across disparate cloud environments, as each provider has its own unique networking constructs and security models. This complexity is compounded by a patchwork of disparate security tools, which leads to inconsistent policy enforcement and dangerous visibility gaps. This fragmented approach for both networking and security is no longer sustainable, creating an environment prone to misconfigurations and blind spots given the speed and scale of modern application development. To address these significant security challenges, we are introducing a set of deeply integrated capabilities for our[Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls). This expanded solution establishes the industry's first automated [Multicloud Security Fabric](https://www.paloaltonetworks.com/resources/techbriefs/unify-security-across-every-cloud-with-multi-cloud-security-fabric) (MSF), delivering a single, cohesive security posture across AWS, Azure and Google Cloud. It unifies continuous visibility and risk assessment, automated deployment of consistent security controls, and advanced threat prevention to protect every type of workload---from traditional virtual machines to containerized applications and emerging AI models. Powered by the[PAN-OS 12.1 Orion operating system](https://www.paloaltonetworks.com/blog/2025/08/paves-way-for-quantum-ready-security/), these new capabilities are designed to tackle multicloud complexity head-on. The platform simplifies security by providing a data-driven understanding of risk across all cloud and AI assets (through [CLARA](https://www.paloaltonetworks.com/network-security/cloud-and-ai-risk-assessment)), automates the application of consistent security with [Microperimeters](https://www.paloaltonetworks.com/blog/ai-security/eliminate-lateral-threats-and-reduce-hybrid-cloud-complexity-with-microsegmentation/?utm_source=linkedin&utm_medium=social&utm_campaign=na&utm_content=pa001283) to contain lateral threats, and scales on-demand with a [Hyperscale Security Fabric](https://www.paloaltonetworks.com/blog/network-security/eliminate-over-provisioning-costs-with-elastic-security/) (HSF) to ensure protection keeps pace with business innovation. This expanded software firewall solution delivers value through four core capabilities that directly address the most pressing challenges in multicloud and AI security. # Core Capability 1: Eliminate Blind Spots with Comprehensive Visibility A core function of the unified security fabric is to provide a single source of truth for your entire asset inventory. In dynamic cloud environments, this is a persistent challenge. Our cloud network security platform addresses this by providing continuous, automated discovery of all applications and workloads---including virtual machines, containers and AI models---across all cloud-native, multicloud and hybrid environments. This visibility is paired with continuous risk assessment, which automatically detects misconfigurations, traffic flow analysis, vulnerabilities and exposures, allowing your teams to move from reactive discovery to proactive risk remediation. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/09/fig-risk-analysis-230x122.png) *Comprehensive visibility across traditional and AI workloads is the foundation of effective risk management.* # Core Capability 2: Automate Deployments to Simplify Multicloud Security The security fabric has been designed to automatically match the velocity of DevOps, which is critical because manual configuration to securely interconnect applications across multiple clouds can stall rapid development expectations. This [multicloud security fabric](https://live.paloaltonetworks.com/t5/community-blogs/a-unified-architecture-for-multi-cloud-security-from-visibility/ba-p/1236819) automatically interconnects cloud regions and applies consistent security policies across AWS, Azure and Google Cloud environments. As new applications are deployed, they are automatically interconnected and protected by Palo Alto Networks software firewalls with unmatched Layer 7 threat efficacy, allowing cloud network security teams to function as an integrated enabler of innovation. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/09/fig-mesh-map-gcp-230x136.png) *With one-click, a secure multicloud security fabric is installed across public and private clouds, ensuring immediate and consistent protection.* # Core Capability 3: Secure Modern Applications with Advanced Threat Prevention This security fabric is not just about connectivity: It's built to deliver advanced threat prevention as an essential capability. This is critical, because modern applications create new pathways for sophisticated threats, which native cloud service provider (CSP) controls often miss. The fabric provides deep Level 7 inspection and inline security to stop these emerging threats. This includes specialized protections for AI runtimes to prevent attacks like prompt injection and model exfiltration, as well as the [enforcement of microperimeters](https://live.paloaltonetworks.com/t5/community-blogs/traffic-redirector-preventing-lateral-threat-movement-to-secure/ba-p/1236816) to contain the lateral movement characteristic of modern ransomware attacks. Additionally, the [hyperscale architecture](https://live.paloaltonetworks.com/t5/community-blogs/hyperscale-security-fabric-securing-the-dynamic-data-center-for/ba-p/1236825) ensures these advanced protections are delivered at line rate, which secures high-scale workloads without introducing performance bottlenecks. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/09/image-2-230x123.png) *Securing east-west application traffic with a microperimeter is a core tenet of Zero Trust, containing breaches by preventing the lateral movement of threats.* # Core Capability 4: Establish Centralized Governance and Unified Policy Managing disparate cloud environments creates operational silos and makes troubleshooting network connectivity nearly impossible. That's why the entire fabric is governed from a single point of control: [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager). From this centralized console, operations teams gain end-to-end visibility, with tools to trace the complete path of application traffic across the multicloud network. This powerful diagnostic capability automatically highlights network problems, such as misconfigurations or performance bottlenecks, and pinpoints the exact location of an issue. This dramatically simplifies troubleshooting and reduces mean time to resolution, enabling teams to move from complex manual diagnostics to streamlined, one-click remediation. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/09/image-1-230x121.png) *Ensure immediate, automated remediation of security issues for uninterrupted protection.* # Begin with a Data-Driven Understanding of Your Risk A unified security foundation is essential for enabling business innovation securely. The journey begins with understanding your specific risk posture. To help you start, we invite you to take the [Cloud Network and AI Risk Assessment (CLARA)](https://www.paloaltonetworks.com/network-security/cloud-and-ai-risk-assessment). This assessment provides a data-driven view of your multicloud and AI assets, helping you identify active risks and prioritize your security efforts. *** ** * ** *** ## Related Blogs ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [#### Achieving Complete Visibility with Multicloud Security Fabric](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/achieving-complete-visibility-with-multicloud-security-fabric/) ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Software Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/software-firewalls/?ts=markdown) [#### Turn Your Multicloud Security into a Business Enabler](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/turn-your-multicloud-security-into-a-business-enabler/) ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [#### The Multicloud Double Tax: Why You're Overpaying for Insecurity](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/the-multicloud-double-tax-why-youre-overpaying-for-insecurity/) ### [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### From Chaos to Command: An Organization's Journey to Master Multicloud](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/from-chaos-to-command-an-organizations-journey-to-master-multicloud/) ### [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Elevating Transparency: Introducing the Palo Alto Networks SASE Health Portal](https://origin-researchcenter.paloaltonetworks.com/blog/sase/elevating-transparency-introducing-the-palo-alto-networks-sase-health-portal/) ### [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Why Sovereignty Controls in SASE Are the New Standard for the Modern Enterprise](https://origin-researchcenter.paloaltonetworks.com/blog/sase/why-sovereign-sase-is-the-new-standard-for-the-modern-enterprise/) ### Subscribe to Network Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://origin-researchcenter.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language