Sold by: Palo Alto NetworksÂ
Deployed on AWS
Free Trial
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Overview
VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
VM-Series now supports DPDK on the C5, C5n, M5, and M5n instances, running on the AWS Nitro System, to efficiently process traffic and offer increased performance. In addition, Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policies that are consistent with on-premises environments.
There are three PAYG bundles available. The licenses includes are as follows: Bundle 1: VM-Series+Threat Prevention+Advanced Threat Prevention+USG (US Government) Support Bundle 2: VM-Series+Threat Prevention+Advanced Threat Prevention+URL Filtering+Advanced URL filtering+DNS Security+Global Protect+WildFire+Advanced Wildfire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-wsu46li6jw3je Bundle 3: VM-Series+Advanced Threat Prevention+Advanced URL Filtering+DNS Security+Global Protect+WildFire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-gfbcyenj6z75uÂ
Highlights
- An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention
- Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration with AWS Transit Gateway
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux PAN-OS 11.1.6-h14
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m5.2xlarge Recommended | $2.05 |
m5.large | $1.15 |
c5n.xlarge | $1.53 |
m5n.large | $1.15 |
m5.4xlarge | $3.83 |
c5.xlarge | $1.53 |
c5.4xlarge | $3.83 |
c5.2xlarge | $2.05 |
c5n.4xlarge | $3.83 |
c5n.2xlarge | $2.05 |
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/about-the-vm-series-firewall/upgrade-the-vm-series-firewall.html See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://live.paloaltonetworks.com/awsÂ
For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Palo Alto Networks
By Forcepoint
By Check Point Software Technologies
Top
10
In Log Analysis, Network Infrastructure
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Processing
Supports DPDK on C5, C5n, M5, and M5n instances running on AWS Nitro System for efficient traffic processing
Threat Prevention
Provides advanced threat prevention technologies to stop both known and unknown attacks
Dynamic Security Policy
Implements whitelisting and segmentation policies dynamically updated based on AWS tags
Traffic Identification
Enables complete visibility and control over networks using powerful traffic identification technologies
Centralized Management
Supports centralized management through Panorama for consistent security policy maintenance across environments
Network Virtualization
Secure virtual private network (VPN) gateway for connecting remote sites and branch offices
Advanced Threat Protection
Dynamic security controls with application layer exfiltration security and advanced evasion techniques (AETs) identification
Intrusion Prevention
Integrated advanced Intrusion Prevention System (IPS) with capability to stop Advanced Evasion Techniques
Security Policy Management
Centralized policy configuration with global update capabilities across network infrastructure
Malware Detection
Sandboxing technology for identifying zero-day attacks and advanced malware
Network Traffic Inspection
Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
Advanced Threat Prevention
Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
Cloud Infrastructure Integration
Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
Security Protocol Coverage
Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
Cloud Service Compatibility
Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway
Standard contract
No
No
No
Customer reviews
4.2
3 ratings
3 AWS reviews
|
113 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Nicolaos N.
A deep review of Palo Alto Networks VM-Series Virtual Firewall
Reviewed on Sep 18, 2025
Review provided by G2
What do you like best about the product?
One thing i like a lot that it does not lack any features from physical firewalls, almost everything you have and need in physical FW, you can have it on VM-Series. Also i like the depth of the security it provides. Deep pack inspection, user/device context, URL filtering, DNS Security and the list goes on, are must features for any company that takes cybersecurity serioysly.
What do you dislike about the product?
I don't like that in VMware ESXi only certain drivers are supported and i dont like the fact, that except that i think that fully deployment is kinda expensive, also required a lot of resources (CPU, RAM etc) to meet performance requirement.
What problems is the product solving and how is that benefiting you?
The number one problem it solves is about security, more specifically cloud enviromenent without missing any feature or policy from traditional FW. A plus is the deep inspection and monitoring in applications/users.
Teddy T.
A top-tier security product, rarely seen,yet vital for strengthening Africa’s digital transformation
Reviewed on Sep 16, 2025
Review provided by G2
What do you like best about the product?
I like the fact that VM series firewall delivers the same full enterprise-grade security functionality as appliance-based solutions, but with instant deployment, avoiding the challenges of international shipping and customs clearance in East Africa, especially Ethiopia. It requires no rack space and also offers flexibility to scale with our country’s dynamic economy, because it allows you to start small and expand as needed. Its intuitive, easy-to-learn GUI is also one of my favorite features. Overall, it’s the best security solution you can get without the logistical headaches
What do you dislike about the product?
One of the things I dislike is the complex licensing model, which can be difficult for some of our customers, along with the high product price and mandatory annual subscriptions. For a country with a weaker economy like ours, securing foreign currency (USD/forex) for these payments is a major challenge. Related to this, the VM series sometimes lags when applying configurations, even after allocating significant resources, which can be frustrating. Another major challenge for Palo Alto in general is the lack of a true local presence. There is a demand for these solutions in Africa, and I would like to see Palo Alto engage more actively in East Africa, especially Ethiopia.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks VM-Series Virtual Firewall is helping us deal with the logistical and cost challenges of deploying appliance-based firewalls in Ethiopia. International shipping and customs clearance are one of the major barriers in our region that slow down projects, but with the VM-Series we get full enterprise-grade security functionality through instant deployment without those challenges. the VM products flexibility feature to start small and scale as our infrastructure grows is also valuable, especially in a dynamic economy like Ethiopia’s.
Bisrateab G.
It has good Performance
Reviewed on Sep 13, 2025
Review provided by G2
What do you like best about the product?
I like that the VM-Series offers strong security features such as advanced application and user identification, along with effective threat prevention including malware and zero-day attack detection. Its ability to provide detailed visibility and control over network traffic in virtual and cloud environments is a major advantage. The firewall’s flexibility to deploy across different cloud platforms and virtual infrastructures makes it very adaptable to various environments.
What do you dislike about the product?
The main downsides are the relatively high licensing and subscription costs, which can add up over time. There is also a steep learning curve for teams new to the platform, making setup and optimization complex. Performance can be limited by the host environment, especially under heavy traffic or with many security features enabled. Additionally, some users find the interface less responsive and troubleshooting can be challenging in complex deployments.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks VM-Series Virtual Firewall solves critical security challenges in virtualized and cloud environments by providing advanced threat prevention, granular visibility, and consistent policy enforcement across hybrid and multi-cloud infrastructures. It addresses the problem of securing dynamic workloads that traditional physical firewalls can’t easily protect, enabling organizations to maintain strong security posture while scaling their operations flexibly. This benefits me by ensuring that network traffic is closely monitored and controlled, reducing the risk of cyberattacks and data breaches. It also simplifies management through centralized control, saving time and effort while improving compliance and operational efficiency. Overall, it helps protect valuable assets without slowing down business growth or complicating cloud adoption.
Mohamed H.
It's stable
Reviewed on Sep 06, 2025
Review provided by G2
What do you like best about the product?
Stability of the palo alto and reliability of the palo series also the GUI is more easy to use .
Also the palo Alto give us more functions that can be use.
Also the palo Alto give us more functions that can be use.
What do you dislike about the product?
That the virtual PaloAlto firewall isn't on premises so it can be attacked by hacker more than the Hardware PaloAlto firewall. Also the OS need to be more smoothly to upgrade.
What problems is the product solving and how is that benefiting you?
It can be functional easily to user and can use the user id . And easy to improve without needing to upgrade the hardware chase or the box all we need is the certificate.
Thomas G.
I have Experiences in Cortex
Reviewed on Sep 05, 2025
Review provided by G2
What do you like best about the product?
It seamlessly integrates with cloud environments, offering consistent protection across hybrid and multi-cloud infrastructures. The VM-Series provides robust threat prevention, deep traffic inspection, and granular application control without compromising performance.
What do you dislike about the product?
Additionally, the initial learning curve and complexity of the platform can be challenging for teams new to Palo Alto’s ecosystem. Improved documentation or more simplified setup guides could help speed up deployment for some users.
What problems is the product solving and how is that benefiting you?
It effectively solves problems related to securing dynamic workloads, controlling application traffic, and preventing advanced cyber threats across hybrid infrastructures. By integrating seamlessly with our existing Cortex software, we benefit from enhanced threat intelligence and automated response capabilities, which improve our overall security posture and streamline incident management.