China's Cyberspace Administration has opened a security review of Palo Alto Networks products, The Register reported, creating a new regulatory risk for a US cybersecurity vendor in a market where Beijing previously used a similar process against Micron.

The regulator framed the review around critical information infrastructure, cybersecurity risks, vulnerabilities and national security.

The announcement did not name a product line, customer group, technical flaw or deadline for findings.

CAC Review Names Product-Security Scope

The CAC action moves the products into China's formal cybersecurity scrutiny process rather than a normal procurement dispute.

The Cyberspace Administration of China stated that the review was needed to protect safe and stable operation of critical information infrastructure and to guard national security.

Palo Alto told the outlet that it maintained high standards of business conduct, security practices and ethics across global operations.

The company also stated that the matter had no current impact on its ability to support customers or deliver products and services in the region.

The public record contains a regulator's national-security justification and a company response denying operational disruption.

No technical allegation has been published against a named firewall, cloud-security product or security-service line.

Micron Precedent Sets The Policy Context

The 2023 Micron investigation gives the Palo Alto review its closest public precedent.

CAC later concluded that Micron posed an unacceptable risk for critical-infrastructure operators, effectively barring those buyers from purchasing the US memory maker's products.

The Micron decision arrived without a detailed public explanation.

The company eventually stopped selling data-centre and server products in China, a move linked by the article to billions of dollars in annual revenue exposure and to openings for domestic memory suppliers.

Palo Alto does not break out revenue by individual country, leaving the scale of any potential China restriction unclear.

Local suppliers including Huawei and H3C sell products that overlap with parts of the US vendor's security portfolio.

Product Scope Remains Undisclosed

China has repeatedly accused Western technology companies of assisting US surveillance and offensive hacking activity, while Western governments have made similar accusations against Huawei and ZTE.

The current CAC notice has not connected Palo Alto to a specific espionage claim.

The review remains a regulatory-scope story until CAC publishes findings or orders.

The unresolved public gaps are the affected products, the evidence behind the review, the customers covered by any potential restriction and the timetable for a decision.