LICENSEWARE
Palo Alto Networks Metric

Cortex Cloud protected workload

Catalog row in Vendor License Metrics · Cited

Unit
Workload
Aliases
protected workload; billable unit
Definition
Understand license plans: "The fundamental metric for consumption is the protected workload. You must procure a license capacity sufficient to cover the total number of workloads you intend to secure."
Counting rules
Billable units per workload: 1 VM (with or without containers), 1 endpoint, 10 agent-protected managed containers (CaaS), 10 cloud buckets, 2 PaaS databases, 1 TB DBaaS stored, 10 SaaS users, 1 on-premises data connection, 4 unmanaged Cloud ASM assets; container image scans have a free quota of 10 per deployed workload. Usage is a 90-day average. Excess posture workloads spill over into unused runtime quota, never the reverse.
Floors / minimums
Annual subscription. Cortex XSIAM Premium Cloud Runtime Security: minimum 200 workloads (priced per workload); Cloud Posture Security includes up to 400 workloads depending on the plan (Cortex XSIAM license tiers).
Applies to products
  • Cortex Cloud Posture Management
  • Cortex Cloud Runtime Security
  • Cortex XSIAM
Applies to editions
  • Cloud Posture Management
  • Cloud Runtime Security
Esc