To reduce infrastructure complexity and vendor management effort, use a NGFW/NGIPS/UTM solution instead of separate Firewall and IDPS solutions.
NGFW/NGIPS/UTM may include the following modules:
See also
Mirantis and Palo Alto Networks Integrate Production-Grade OpenStack with Next-Generation Security