Listing Thumbnail

    (Federal) VM-Series Virtual NextGen Firewall Bundle3 with 24x7 Support

     Info
    Deployed on AWS
    Free Trial
    The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.

    Overview

    VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.

    VM-Series now supports DPDK on the C5, C5n, M5, and M5n instances, running on the AWS Nitro System, to efficiently process traffic and offer increased performance. In addition, Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policies that are consistent with on-premises environments.

    There are three PAYG bundles available. The licenses includes are as follows: Bundle 1: VM-Series+Threat Prevention+Advanced Threat Prevention+USG (US Government) Support Bundle 2: VM-Series+Threat Prevention+Advanced Threat Prevention+URL Filtering+Advanced URL filtering+DNS Security+Global Protect+WildFire+Advanced Wildfire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-wsu46li6jw3je  Bundle 3: VM-Series+Advanced Threat Prevention+Advanced URL Filtering+DNS Security+Global Protect+WildFire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-gfbcyenj6z75u 

    Highlights

    • An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention
    • Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration with AWS Transit Gateway

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux PAN-OS 10.2.13-h16

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    (Federal) VM-Series Virtual NextGen Firewall Bundle3 with 24x7 Support

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (16)

     Info
    Dimension
    Cost/hour
    m5.2xlarge
    Recommended
    $2.05
    m5.large
    $1.15
    c5n.xlarge
    $1.53
    m5n.large
    $1.15
    m5.4xlarge
    $3.83
    c5.xlarge
    $1.53
    c5.4xlarge
    $3.83
    c5.2xlarge
    $2.05
    c5n.4xlarge
    $3.83
    c5n.2xlarge
    $2.05

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-the-vm-series-firewall.html  See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.

    Support

    Vendor support

    To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://live.paloaltonetworks.com/aws 

    For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Log Analysis, Network Infrastructure

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Network Traffic Processing
    Supports DPDK on C5, C5n, M5, and M5n instances running on AWS Nitro System for efficient traffic processing
    Threat Prevention
    Provides advanced threat prevention technologies to stop both known and unknown attacks
    Dynamic Security Policy
    Implements whitelisting and segmentation policies dynamically updated based on AWS tags
    Traffic Identification
    Enables complete visibility and control over networks using powerful traffic identification technologies
    Centralized Management
    Supports centralized management through Panorama for consistent security policy maintenance across environments
    Network Virtualization
    Secure virtual private network (VPN) gateway for connecting remote sites and branch offices
    Advanced Threat Protection
    Dynamic security controls with application layer exfiltration security and advanced evasion techniques (AETs) identification
    Intrusion Prevention
    Integrated advanced Intrusion Prevention System (IPS) with capability to stop Advanced Evasion Techniques
    Security Policy Management
    Centralized policy configuration with global update capabilities across network infrastructure
    Malware Detection
    Sandboxing technology for identifying zero-day attacks and advanced malware
    Network Traffic Inspection
    Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
    Advanced Threat Prevention
    Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
    Cloud Infrastructure Integration
    Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
    Security Protocol Coverage
    Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
    Cloud Service Compatibility
    Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.3
    12 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    8%
    92%
    0%
    0%
    0%
    12 AWS reviews
    |
    114 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    MuhammadNadeem

    Has supported urgent deployments and enabled inline threat protection but pricing and features could be more flexible

    Reviewed on Nov 06, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I am not working on a NAC solution. I am working on Palo Alto Networks VM-Series  firewall, and I am mainly working with firewalls.

    I am totally working with Palo Alto Networks VM-Series  products. I am working with VMs, including 400 series, 1400 series, and 3400 series firewalls, which are next-generation firewalls and fourth-generation firewalls of Palo Alto Networks VM-Series.

    I am also working with VMs for Palo Alto Networks VM-Series, and for POCs sometimes. Mostly, I provide solutions for some of our customers who need urgent solutions with Palo Alto Networks VM-Series. I provide them VMs and activate the licenses from Palo Alto as a partner. We are working as innovator partners with Palo Alto. Sometimes for POCs and for urgent solutions, if the customer or some organization needs it, we provide them Palo Alto Networks VM-Series and it works fine.

    We are working with Dynamic Address Groups in Palo Alto Networks VM-Series. Mostly, we use them for securing our network and for blocking malicious traffic from specific sources around the globe. We block them through Dynamic Address Groups as a source and create another policy for that. We block any dynamic addresses coming with malicious traffic using specific policies. We use Dynamic Address Groups and after tagging those malicious IPs, when they come to our firewall from outside or from inside, including some of our local computers, if we detect something concerning such as bots or similar traffic, we block them using Dynamic Address Groups.

    Advanced Threat Protection is working in Palo Alto Networks VM-Series. In Advanced Threat Protection, we use inline protection features, including anti-malware solutions and vulnerability protection. We mostly use Advanced Threat Protection because Palo Alto provides the core subscription and core security bundle, which is cheaper than the other bundle. We propose the same bundle to customers because it is cheaper and includes DNS security, SD-WAN, vulnerability protection, URL filtering, anti-spyware, and antivirus subscriptions bundled in the same core bundle. If I buy only threat protection separately, it is more expensive than this bundle. We create security profiles for spyware and antivirus and provide inline protection to customers.

    What is most valuable?

    App-IDs in Palo Alto Networks VM-Series are very important and working fine. We mostly use App-IDs due to which we are securing customers who are vulnerable and who need security solutions.

    There are Dynamic Address Groups, EDLs, and integration with other solutions such as Forescout for Palo Alto Networks VM-Series, which we did two years ago. There are API integrations as well. We mostly automate the security structure for the organization using SIEM  solutions, integration with SIEM  solutions, and XDR  solutions. This is very interesting.

    What needs improvement?

    I am not using Palo Alto Networks VM-Series mostly, but based on my experience, there are some deficiencies in Palo Alto Networks VM-Series. Having those features missing, we are not proposing Palo Alto Networks VM-Series to all customers. However, for urgency and for some solutions that customers need for some of their other sites and subdivisions, we are providing the same.

    For how long have I used the solution?

    I have been working with Palo Alto Networks VM-Series since 2020, which is approximately six to seven years back.

    What do I think about the stability of the solution?

    Palo Alto Networks VM-Series is very stable.

    What do I think about the scalability of the solution?

    Scalability for Palo Alto Networks VM-Series is eight out of ten.

    How are customer service and support?

    Technical support for Palo Alto Networks VM-Series is provided through premium partner support. We are working with StarLink, and they are providing the best solution and best support. We have advanced partnership and advanced support for some of our customers. They are good with technical solutions.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    Palo Alto Networks VM-Series is better than Fortinet, mainly in its SP3 structure, flexibility, and reliability, and based on feedback from customers. Most of our customers have shifted from Fortinet to Palo Alto Networks VM-Series. Their feedback indicated concerns about slowness, subscription renewals, and other aspects they were not happy with.

    Which other solutions did I evaluate?

    Fortinet is the main competitor for Palo Alto Networks VM-Series on the market.

    What other advice do I have?

    Prices of Palo Alto Networks VM-Series are higher than other firewalls and other solutions. However, we are using its security features and proposing them, mostly winning tenders with this product. Palo Alto Networks VM-Series is a very best solution if you have subscription and extra support, and I would rate this solution seven to eight out of ten. I would give this review an overall rating of eight.

    Bereket N.

    Experience on palo alto vm Series Firewall

    Reviewed on Nov 05, 2025
    Review provided by G2
    What do you like best about the product?
    The most i like is its cost and it has more capable as the physical one and also as long as you purchase it you can get it no pending time west in manfacturing
    What do you dislike about the product?
    While enabling advanced features it has the most difficualt configurations by itself and also haively depends on the server capacity or resource is needed
    What problems is the product solving and how is that benefiting you?
    As i said previously you can save time of munfacturing, cost and also defending the network infrastructure with palo alto makes secure with tight security profiles
    Oluwaseun A.

    Seamless Deployment with Robust Security

    Reviewed on Nov 04, 2025
    Review provided by G2
    What do you like best about the product?
    I really appreciate the ease of configuration provided by the Palo Alto Networks VM-Series Virtual Firewall. The user interface and experience (UI/UX) make it very straightforward and intuitive for someone like me to configure and manage the firewall effectively. This seamless interface significantly aids in deploying the firewall into our infrastructure without much hassle. Additionally, the support from Palo Alto Networks during deployment was invaluable, allowing us to implement the firewall quickly and efficiently. The integration into our network was smooth, enhancing our productivity by enabling us to perform large configurations and then focus our efforts on other tasks. Overall, this firewall is incredibly efficient and productive, ensuring we're able to perform our security functions effectively as a team.
    What do you dislike about the product?
    I feel that the integration of more AI capabilities into the Palo Alto Networks VM-Series Virtual Firewall could significantly elevate its functionality. Although there are current functions that touch on this, a more comprehensive AI integration would enhance the ability to analyze incoming logs and automatically generate a visual representation of the network's status. This would be incredibly beneficial for quickly understanding what's happening within the network and for generating management and board reports without needing to manually interpret raw data or logs.
    What problems is the product solving and how is that benefiting you?
    I use Palo Alto Networks VM-Series Virtual Firewall for deep packet filtering, enhancing our security by blocking outside threats and analyzing traffic logs. It simplifies configuration and deployment, making our work more efficient and productive.
    Security and Investigations

    User-Friendly Interface and Robust Support Make It Stand Out

    Reviewed on Nov 04, 2025
    Review provided by G2
    What do you like best about the product?
    What I find most helpful is the level of granular visibility it provides, which is essential for my work in the SOC. The App-ID and User-ID features are incredibly powerful.
    What do you dislike about the product?
    The primary downside is the complexity and high cost of the licensing model. It feels like every essential security feature is a separate, expensive subscription.
    What problems is the product solving and how is that benefiting you?
    The primary business problem the VM-Series solves for us is extending consistent, next-generation security to our virtualized and cloud environments .
    Mwawai H.

    A powerful Firewall with excellent results but high cost and complex setup

    Reviewed on Nov 03, 2025
    Review provided by G2
    What do you like best about the product?
    What i like best about Palo Alto Network VM- Series Virtual Firewall is that it is easy to implement and use. The interface in place its so interactive hence one is able to manage and create policies across the cloud and virtual environments. The integration with third parties application for instance AWS , Azure makes is more viable in deployment in hybrid setups. The customer support is very reliable in managing the tickets raised with no delay which helps me having to use it all the time whenever i face any challenges.
    What do you dislike about the product?
    What i dislike about VM-Series is that it is complex to setup ,configure and manage it especially for new users and performance depends on the size of the cloud. However it is still used the licensing is expensive making it impossible for smaller teams with limited resources.
    What problems is the product solving and how is that benefiting you?
    It has protected me against cloud workloads from cyber threats because of its advanced threat prevention and visibility across network traffic which reduces data breaches and security risks
    View all reviews