The next-generation firewall configuration templates are based on existing best practice recommendations from Palo Alto Networks. Instead of extensive and detailed 'how to' documentation, the templates provide an easy to implement configuration model that is use case agnostic. Explanation:

A firewall is a computer network security system that restricts internet traffic in, out, or within a private network. This software or dedicated hardware-software unit functions by selectively blocking or allowing data packets.

provide NAT & usage monitoring implement VPNs using IPSec must be immune to penetration Firewall Limitations cannot protect from attacks bypassing it eg sneaker net, utility modems, trusted organisations, trusted services (eg SSL/SSH) cannot protect against internal threats eg disgruntled or colluding employees