The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data loss prevention into their application development workflows. Native AWS services combined with VM-Series automation features allows you to create "touchless" deployments and enables your developers to operate at the speed of the cloud. Your applications and data are protected with whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.

Available in AWS standard regions as well as AWS GovCloud (US), the VM-Series BYOL and Enterprise Licensing Agreement allow you to purchase the VM-Series next-generation firewall bundles that are appropriate for your needs. Panorama (purchased separately) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policy that is consistent with on-premises environments.

Note: You can deploy VM-Series PAN-OS 9.0 and later versions of software on AWS Nitro instances (C5 or M5). With PAN-OS 9.0.3.xfr version, VM-Series now supports Intel DPDK on these AWS C5 and M5 instances to efficiently process traffic and offer increased performance. If you are switching your VM-Series to C5 or M5 instance types, we recommend you to migrate your configuration from the old instance to the new C5 or M5 instance.