Redefining Network Security for the Frontier AI Era: PAN-OS 12.2 Ceres

Palo Alto Networks introduced PAN-OS 12.2 Ceres, a landmark release representing a major leap forward in network security. Ceres brings to market 55+ innovations, including three flagship core capabilities designed to shift the balance of power back to defenders. First, Advanced Virtual Patching harnesses Frontier AI to discover unknown vulnerabilities and deploy protections in hours, collapsing the exposure window from the industry-average 55 days it takes to deploy a traditional patch down to a near-zero window. Unit 42's autonomous AI system NOVA identified more than 14,000 previously unknown vulnerabilities in just two months. Advanced Virtual Patching closes the gap in the network, blocking the exploit without applying a patch, rebooting a system, or causing downtime, especially valuable for OT, critical infrastructure, healthcare, and IoT. Second, Advanced IP Defense counters adversaries evading traditional perimeter detection using direct-to-IP connection techniques. It includes real-time IP-layer intelligence leveraging global telemetry from over 70,000 customers, Zero-Trust IP enforcement validating every network connection maps to legitimate DNS resolution, and powerful IP-layer context monitoring across more than 40 security attributes. Third, Network Security Agents: six specialized AI-powered agents available through Strata Cloud Manager automate routine tasks. PAN-OS Ceres 12.2 also expands platform protection: quantum-safe and next-generation trust security automating certificate lifecycle management; 5th-generation ML-optimized hardware with 400G interfaces and 300 Gbps threat inspection; modernized OT defense with PA-50R ruggedized 5G firewalls; AI and agent security via Prisma AIRS; and browser-to-firewall integration eliminating the need to decrypt on the endpoint.