Palo Alto Networks Next-Generation CASB review
A broad CASB for SaaS discovery, data protection, posture management and threat prevention.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Palo Alto Networks Next-Generation CASB is a hybrid cloud access security broker for organizations protecting sanctioned and unsanctioned SaaS applications. It supports web and API controls, combining SaaS application discovery, shadow IT visibility, inline policy enforcement and API-based scanning of cloud assets. Security teams can also apply data loss prevention, SaaS security posture management, misconfiguration detection and remediation, inline malware prevention, WildFire analysis, and user and entity behavior analytics. It is designed for hybrid workforces using Prisma Access and Palo Alto Networks next-generation firewalls.
Its main strength is breadth across the SaaS security lifecycle. The service connects with Airtable, Amazon S3, Box, Dropbox, GitHub, Google Drive, Microsoft 365, Salesforce, ServiceNow, Slack, Workday and Zoom. This supports visibility and controls across common business, storage, development and collaboration applications. Centralized management through Strata Cloud Manager or Panorama gives teams a defined administrative path, while the combination of inline and API-based controls supports both active traffic and cloud application assets.
The pricing model is contact sales, so organizations should plan for a sales-led evaluation rather than a self-serve purchase. Palo Alto Networks Next-Generation CASB is a strong fit for security teams that want CASB alongside threat prevention, DLP, posture management and behavior analytics. Teams seeking only a focused SaaS discovery or policy tool may find its wider control set unnecessary. Its fit is strongest where Palo Alto Networks management and security technologies already align with the organization’s hybrid deployment model.
Palo Alto Networks Next-Generation CASB pros and cons
- Where it wins
- Combines inline and API CASB with DLP and posture management
- Covers discovery, misconfiguration remediation and malware analysis
- Integrates with Microsoft 365, Salesforce, Slack, Box and more
- Where it doesn't
- Pricing requires a contact-sales process
- Management is centered on Strata Cloud Manager or Panorama
- Its broad control set may exceed narrow CASB requirements
Palo Alto Networks Next-Generation CASB fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update