> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements.md).

# Feature Enhancements

These enhancements provide new and improved capabilities.

## General

| FEATURE                                                                       | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| ----------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| New forwarding integrations for cases and issues                              | Streamline issue and case management workflows by forwarding cases and issues to new destinations such as Splunk, Amazon SQS, Amazon S3, and Webhook, allowing you to manage investigations in external systems or meet strict data retention requirements.                                                                                                                                                                                                                                        |
| FedRamp/Government Cloud support                                              | For organizations in regulated industries (such as defense or public sector), you can now onboard and manage your cloud security posture for tenants operating in isolated Government Cloud environments (including AWS GovCloud, Azure Government, and Google Public Sector). This ensures you have full visibility, detection coverage, and compliance monitoring across segregated cloud partitions, allowing you to easily meet strict regulatory requirements.                                |
| Onboard Microsoft Azure using Terraform                                       | You can now automate infrastructure provisioning and save deployment time by using Terraform to onboard Microsoft Azure tenant and management group scope cloud instances.                                                                                                                                                                                                                                                                                                                         |
| Compliance improvements                                                       | <ul><li><strong>Asset card compliance tab:</strong> Gain a detailed understanding of an asset's alignment with security standards by using the new compliance tab, which displays an asset's overall compliance score and compliance against individual controls.</li><li><strong>Compliance Assessment CSV report improvements:</strong> Compliance Assessment CSV reports now include more actionable data such as remediation guidance for failed rules, tags, and cloud account IDs.</li></ul> |
| Autodetect Palo Alto Networks VM-Series firewalls                             | We now support the automatic detection of VM-Series firewalls deployed using Gateway Load Balancers (GWLBs) in isolated mode in AWS. This provides additional visibility and insights for internet-exposed assets.                                                                                                                                                                                                                                                                                 |
| Improved discovery and scanning for private Azure Container Registries (ACRs) | Cortex Cloud now provides complete visibility into all your Azure Container Registries by discovering and scanning the repositories and images in private ACRs. We enabled a new **Allow connection to private registries** toggle by default so the system can automatically create private links for successful scanning. The system then deletes these links immediately after to manage your resources efficiently and maintain security.                                                      |
| Asset-level rule configuration                                                | Support for asset-based rules allows Exclusion, Starring, Scoring, and Playbook rules to be configured for specific asset objects, enabling tailored automation and notifications per account or asset group.                                                                                                                                                                                                                                                                                      |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.