Purchase or lease Palo Alto NGFW hardware or software and manage it internally. This option provides defense-grade perimeter security for organizations that prefer direct operational control.