V2 Palo Alto Networks Partner Page

Your firewall requests a key.
Quantum physics supplies it.

[ 1 ] Network orchestration

enQase QMesh functions as network orchestrator to create large-scale Quantum Key Distribution networks, spanning metro area and wide area networks.

[ 2 ] Key distribution

QMesh securely generates and distributes quantum-derived symmetric key material to Palo Alto Networks firewalls using the ETSI GS QKD 014 interface.

[ 3 ] Quantum-safe VPN establishment

Each firewall retrieves its assigned quantum-generated key material from the local QKD node, while key identifiers are exchanged between peers to establish shared encryption context.

[ 4 ] Architecture preserved

This approach preserves the existing Palo Alto Networks security architecture while adding a physics-based layer of cryptographic protection independent of traditional key exchange mechanisms.

What each side contributes

Palo Alto Networks

Next-Generation Firewall (NGFW)

A prevention-focused architecture that is straightforward to deploy and operate. Machine learning inspects all traffic, including applications, threats and content, and ties that traffic to the user regardless of location or device type.

enQase

QMesh QKD

An enterprise quantum networking platform for deploying and managing symmetric key distribution at scale. Keys are generated and distributed over a quantum channel, where any attempt to intercept the transmission introduces detectable changes to the quantum state. Eavesdropping is identified before the keys are used.

Five outcomes from one integration.

Quantum-generated keys on high-value links

Protect the communications that warrant it, without extending quantum key distribution across the whole estate at once.

No network redesign

Existing site-to-site IPsec VPNs are secured in place and the Palo Alto Networks security architecture is preserved.

Crypto-agility through open standards

The integration runs over ETSI and ITU interfaces rather than a proprietary coupling between two vendors.

Scale beyond a single pair of sites

Trusted-node and multi-hop deployments extend quantum-secure communications across many locations.

Scale beyond a single pair of sites

Trusted-node and multi-hop deployments extend quantum-secure communications across many locations.

Built on ETSI and ITU standards.

Hub and spoke

Several sites keyed from a central receiver, for concentrated campus or data centre estates.

Trusted node

Reach extended past a single fibre span by relaying key material through a trusted intermediate node.

Multi-hop

Metro and wide area key distribution networks spanning many sites under one orchestrated fabric.

What has been tested, and how.

COMPONENT

NOTES

QMesh QKD

Integration testing completed and validated against Palo Alto Networks Next-Generation Firewalls.

Site-to-site IPsec VPN

Each firewall retrieves its assigned key material from the local QKD node. Key identifiers are exchanged between peers to establish shared encryption context.

ETSI GS QKD 014 interface

Standards-based quantum key distribution.

The Palo Alto Networks NGFW - enQase QKD and Quantum-safe VPN Solution

Your firewall requests a key.
Quantum physics supplies it.

What each side contributes

Five outcomes from one integration.

Built on ETSI and ITU standards.

What has been tested, and how.

Combine industry-leading network security with standards-based Quantum Key Distribution.

The Palo Alto Networks NGFW - enQase QKD and Quantum-safe VPN Solution

Your firewall requests a key.Quantum physics supplies it.

What each side contributes

Five outcomes from one integration.

Built on ETSI and ITU standards.

What has been tested, and how.

Combine industry-leading network security with standards-based Quantum Key Distribution.

Your firewall requests a key.
Quantum physics supplies it.