What are the limitations of using only Palo Alto Networks firewalls for DDoS protection?

While Palo Alto Networks firewalls offer strong DDoS protection, they have limitations when faced with extremely large-scale, high-volume attacks. On-premise firewalls have capacity limits. Relying solely on on-premise solutions may not be enough to mitigate attacks that exceed the firewall's processing power or network bandwidth. Integration with cloud-based services is often necessary for comprehensive protection.