Sold by: Palo Alto NetworksÂ
Deployed on AWS
Free Trial
Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
Overview
This offering includes a free, 15-day trial. Go beyond base layer 3, 4 protection with industry leading firewall and a comprehensive suite of security services in a cloud-native form factor that seamlessly integrate and scale with your AWS environment.
02/01 UPDATE - This listing now includes Palo Alto Networks Advanced cloud-delivered Security Services. These services increase firewall efficacy against zero day and other resilient threats (requires PAN-OS versions 10.2.8, 11.0.4, 11.1.2 or later).
Threat coverage - keep your workloads safe from exploits, malware, command & control attempts, web-based threats, DNS-layer attacks, file-based threats and malware piggybacking on mobile users traffic with industry-leading traffic inspection. The following security services that are available with this product listing:
Note: To activate below services, follow the steps in https://shorturl.at/mnsJ1Â to register your firewall
-
Advanced Threat Prevention - safeguard your network from known and zero day threats, such as exploits, malware, spyware, and command and control attacks, with market-leading, researcher-grade signatures and ML inspection engine that do not compromise performance.
-
Advanced URL Filtering - defend your network from highly evasive phishing, ransomware and other web-based attacks. Palo Alto Networks inline machine learning-based web security engine enables real-time detection of previously unseen threats to prevent patient zero. Create granular policy controls that dynamically update as new malicious URLs are discovered.
-
Advanced WildFire - identify file-based threats through inline static and dynamic analysis in the cloud. Palo Alto Networks proprietary hypervisor enables detection of sophisticated sandbox-resistant malware, extending your coverage to these previously unseen threats. Advanced Wildfire adds real-time threat signature updates for your Advanced Threat Prevention service.
-
DNS Security - extend your threat coverage by detecting and preventing sophisticated DNS-layer network attacks and data exfiltration.
-
Global Protect - secure your infrastructure from malware and threats that can piggyback on traffic from mobile users.
Simplified policy management - means your policies adapt to changes in your AWS infrastructure while keeping your resources protected in a consistent manner without manual intervention by the FW admin.
Next-Gen Security - protect business critical data with VM-Series virtual firewalls that give you complete application layer-7 visibility and control of your traffic in your AWS environment.
Easy deployment - get started with a few clicks and deploy additional firewalls through the familiar EC2 instance creation flow.
Looking for a lighter version with reduced costs? Try our VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG). See the link below.
Highlights
- Best-in-class public cloud network security solution powered by AI/ML and latest threat research protects your workloads against day zero and known threats with application layer 7 visibility.
- Integrations with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway allow you to protect traffic across many types of dynamic and large scale deployments.
- Policy definitions dynamically apply to your cloud assets based on AWS tags, Application IDs, User IDs, geographies or zones.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux PAN-OS 11.1.6-h10
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c5n.xlarge Recommended | $1.71 |
c5d.large | $1.35 |
c6in.2xlarge | $2.43 |
c6i.4xlarge | $4.32 |
c5d.xlarge | $1.71 |
c5.xlarge | $1.71 |
c4.8xlarge | $4.32 |
c6i.2xlarge | $2.43 |
c5d.4xlarge | $4.32 |
c6i.xlarge | $1.71 |
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit:
https://live.paloaltonetworks.com/awsÂ
For post-sales support, you can use the following options: Call us at 1 (866) 898-9087
Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Palo Alto Networks
By Forcepoint
By Check Point Software Technologies
Top
10
In Network Infrastructure, Security
Top
10
In Log Analysis, Network Infrastructure
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Threat Prevention
Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
Web Security
Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
File Analysis
Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
Protocol Layer Security
Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
Traffic Visibility
Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts
Network Virtualization
Secure virtual private network (VPN) gateway for connecting remote sites and branch offices
Advanced Threat Protection
Dynamic security controls with application layer exfiltration security and advanced evasion techniques (AETs) identification
Intrusion Prevention
Integrated advanced Intrusion Prevention System (IPS) with capability to stop Advanced Evasion Techniques
Security Policy Management
Centralized policy configuration with global update capabilities across network infrastructure
Malware Detection
Sandboxing technology for identifying zero-day attacks and advanced malware
Network Traffic Inspection
Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
Advanced Threat Prevention
Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
Cloud Infrastructure Integration
Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
Security Protocol Coverage
Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
Cloud Service Compatibility
Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway
Standard contract
No
No
No
Customer reviews
4.4
4 ratings
4 AWS reviews
|
109 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Cristian C.
Flexible virtual firewall with strong security features
Reviewed on Aug 25, 2025
Review provided by G2
What do you like best about the product?
The most helpful aspect of the VM-Series is its flexibility in virtualized environments. It allows us to enforce consistent security policies across multiple cloud and on-premises instances, giving strong visibility into traffic and applications. Automated threat detection and AI-driven alerts help us respond to incidents faster, reducing the time spent on manual monitoring. The integration with our existing cloud infrastructure has also simplified management and improved overall efficiency.
What do you dislike about the product?
The initial deployment can be complex, especially when scaling across multiple virtual networks. Fine-tuning policies and integrating with other monitoring tools took longer than expected, requiring extra training for the team. Pricing can become significant as the number of virtual instances grows. While the firewall is powerful, the documentation could be more user-friendly for first-time administrators.
What problems is the product solving and how is that benefiting you?
The VM-Series Virtual Firewall has helped us centralize security across multiple virtualized environments, including cloud and on-premises workloads. Before using it, managing separate firewalls for each instance created inefficiencies and increased the risk of misconfigurations. Now we can enforce consistent policies, detect threats faster, and reduce manual monitoring. This has improved our incident response times and overall confidence in network security. However, setting up complex policies and integrating with existing monitoring tools still requires extra effort, and scaling the solution can increase costs.
Apparel & Fashion
Easy-to-use interface and quick configuration structure
Reviewed on Aug 07, 2025
Review provided by G2
What do you like best about the product?
Virtual system. Fast interface access. Multiple rule support. Easily accessible menus. Strict security rules. Configurable VPN modules and quick rule writing.
What do you dislike about the product?
Character issue when importing groups in active directory synchronization. iOS support issues. Update and VPN connection issues, especially on mobile operating systems.
What problems is the product solving and how is that benefiting you?
The filtering rules are excellent. Furthermore, effective management is based on MAC addresses. Simplified graphical representation. Menus are in the right places and don't require searching. Security is top-notch. Sometimes, even we can get caught up in security.
Computer & Network Security
VM-Series: The next-generation of firewall
Reviewed on Aug 05, 2025
Review provided by G2
What do you like best about the product?
I like the fact that the firewall has a relatively low false-positive rates. Also, you can get all the PAN-OS features without waiting for the vendor to port them. This was kind of time-consuming part. The single-pass classification with the flow is also easy to use without much complication. I didn't need much support, which was also a good thing when using the product. The logging is incredible and very well organized with rich metadata.
What do you dislike about the product?
When we have people new to the product, they need kind of training because they don't know how to work with the PAN-OS. So onboarding these guys is quiete heavy in terms of training. Also, the frequency of PAN-OS upgrades is relatively high, which I need all the time to restart the service. We have also noticed more recently that when using a high traffic (e.g., PPS) or even large number of IPS signatures, the hypervisor is getting stressed. Some colleagues from different companies also noticed the same issue.
What problems is the product solving and how is that benefiting you?
The business problems I am working with are the detection of malicious traffic before they reach the infrastructure, as we need better visibility and high quality of logging and metadata. This is very important in our process.
Sanket Bhostekar
Experience with integrated visibility and ongoing support fulfills requirements effectively
Reviewed on Jul 31, 2025
Review provided by PeerSpot
What is our primary use case?
We have a Firewall as well as a Synapse solution, and we have EDR, XDR as well. The Palo Alto Networks VM-Series Firewall is what we are using.
What is most valuable?
From a Synapse perspective, they have better visibility, better CV detection, better exposure detection, and it is in a single tool, so we are happy with it.
The integration of Palo Alto Networks VM-Series within my existing network infrastructure and security tools is good; they are resilient, and we can integrate with anything easily.
What needs improvement?
There is one thing regarding Palo Alto Networks VM-Series that they need to look into, which is ISPM, Identity Security Posture Management, and other than that, I could see there are multiple things which they have already been doing well.
Technical support is good for Palo Alto Networks VM-Series, but sometimes for new feature requests, we are facing challenges. We are the conglomerate, so individual business has different requirements, which we are expecting some new requests for. Whenever any custom requirement exists in an existing tool, they are taking much time with the engineering team, which is the only thing I'm expecting them to improve. Other than that, this product is very good.
I think overall security is something they need to make into a single pane of glass to help the customer who is using only the single Palo Alto Networks vendor, so they will get end-to-end visibility in a single console.
For how long have I used the solution?
I have been using them for around three years.
What do I think about the scalability of the solution?
My experience with the scalability of Palo Alto Networks VM-Series is good; whenever we are facing any issues, they are helping, and it is a scalable environment.
How are customer service and support?
Technical support is good for Palo Alto Networks VM-Series, but sometimes for new feature requests, we are facing challenges.
How would you rate customer service and support?
Positive
What other advice do I have?
We are generally satisfied with Palo Alto Networks VM-Series.
I would rate Palo Alto Networks VM-Series technical support an eight out of ten.
I would recommend Palo Alto Networks VM-Series to others.
I am a customer of Palo Alto Networks.
Actually, we are trying to migrate to Cortex Cloud; currently, we are using Prisma, so we are in the phase to migrate to Cortex Cloud, but have not yet migrated, so I am not experienced with it and cannot give feedback about it.
We haven't used Prisma Access Browser .
Overall rating: 10/10
Insurance
Amazing virtual firewall
Reviewed on Jun 25, 2025
Review provided by G2
What do you like best about the product?
One of the best to provide security to cloud infrastructures. Posses the ability to inspect the traffic in-depth and analyze before actually processing to the next hop.
What do you dislike about the product?
It’s that it’s virtual. Completely dependent on the physical hardware if it’s hosting multiple vm firewalls. Failure to one physical hardware can lead to multiple vms failure
What problems is the product solving and how is that benefiting you?
As said we use the firewall for in depth inspection of the incoming traffic coming to the corporate network and minimize the risks by providing security to the private and hybrid cloud infrastructures