Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

    Listing Thumbnail

    VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG)

     Info
    Free Trial
    Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
    Listing Thumbnail

    VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG)

     Info

    Overview

    Play video

    This offering includes a free, 15-day trial. Go beyond base layer 3, 4 protection with industry leading firewall and a comprehensive suite of security services in a cloud-native form factor that seamlessly integrate and scale with your AWS environment.

    02/01 UPDATE - This listing now includes Palo Alto Networks Advanced cloud-delivered Security Services. These services increase firewall efficacy against zero day and other resilient threats (requires PAN-OS versions 10.2.8, 11.0.4, 11.1.2 or later).

    Threat coverage - keep your workloads safe from exploits, malware, command & control attempts, web-based threats, DNS-layer attacks, file-based threats and malware piggybacking on mobile users traffic with industry-leading traffic inspection. The following security services that are available with this product listing:

    Note: To activate below services, follow the steps in https://shorturl.at/mnsJ1  to register your firewall

    1. Advanced Threat Prevention - safeguard your network from known and zero day threats, such as exploits, malware, spyware, and command and control attacks, with market-leading, researcher-grade signatures and ML inspection engine that do not compromise performance.

    2. Advanced URL Filtering - defend your network from highly evasive phishing, ransomware and other web-based attacks. Palo Alto Networks inline machine learning-based web security engine enables real-time detection of previously unseen threats to prevent patient zero. Create granular policy controls that dynamically update as new malicious URLs are discovered.

    3. Advanced WildFire - identify file-based threats through inline static and dynamic analysis in the cloud. Palo Alto Networks proprietary hypervisor enables detection of sophisticated sandbox-resistant malware, extending your coverage to these previously unseen threats. Advanced Wildfire adds real-time threat signature updates for your Advanced Threat Prevention service.

    4. DNS Security - extend your threat coverage by detecting and preventing sophisticated DNS-layer network attacks and data exfiltration.

    5. Global Protect - secure your infrastructure from malware and threats that can piggyback on traffic from mobile users.

    Simplified policy management - means your policies adapt to changes in your AWS infrastructure while keeping your resources protected in a consistent manner without manual intervention by the FW admin.

    Next-Gen Security - protect business critical data with VM-Series virtual firewalls that give you complete application layer-7 visibility and control of your traffic in your AWS environment.

    Easy deployment - get started with a few clicks and deploy additional firewalls through the familiar EC2 instance creation flow.

    Looking for a lighter version with reduced costs? Try our VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG). See the link below.

    https://aws.amazon.com/marketplace/pp/prodview-mn63yjbq37n4c?sr=0-1&ref_=beagle&applicationId=AWSMPContessa 

    Highlights

    • Best-in-class public cloud network security solution powered by AI/ML and latest threat research protects your workloads against day zero and known threats with application layer 7 visibility.
    • Integrations with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway allow you to protect traffic across many types of dynamic and large scale deployments.
    • Policy definitions dynamically apply to your cloud assets based on AWS tags, Application IDs, User IDs, geographies or zones.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux PAN-OS 10.2.10-h12

    Typical total price

    This estimate is based on use of the seller's recommended configuration (c5n.xlarge) in the US East (N. Virginia) Region. View pricing details

    $1.836/hour

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product at no cost for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG)

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covering your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (42)

     Info
    Instance type
    Product cost/hour
    EC2 cost/hour
    Total/hour
    m4.large
    $1.26
    $0.10
    $1.36
    m4.xlarge
    $1.62
    $0.20
    $1.82
    m4.2xlarge
    $2.25
    $0.40
    $2.65
    m4.4xlarge
    $4.05
    $0.80
    $4.85
    m5.large
    $1.26
    $0.096
    $1.356
    m5.xlarge
    $1.62
    $0.192
    $1.812
    m5.2xlarge
    $2.25
    $0.384
    $2.634
    m5.4xlarge
    $4.05
    $0.768
    $4.818
    m5n.large
    $1.26
    $0.119
    $1.379
    m5n.xlarge
    $1.62
    $0.238
    $1.858

    Additional AWS infrastructure costs

    Type
    Cost
    EBS General Purpose SSD (gp2) volumes
    $0.10/per GB/month of provisioned storage

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.

    Support

    Vendor support

    To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit:

    https://live.paloaltonetworks.com/aws 

    For post-sales support, you can use the following options: Call us at 1 (866) 898-9087

    Open a case by following the steps here:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    5
    1 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    100%
    0%
    0%
    0%
    0%
    1 AWS reviews
    |
    37 external reviews
    External reviews are sourced from G2  and are not included in the star rating for this product.
    Afroz M.

    Easy deployment to secure Cloud workloads

    Reviewed on Feb 09, 2025
    Review provided by G2
    What do you like best about the product?
    Well, there are many positive aspects of this virtual FW. The majority ones are - quick and easy deployment, features go beyond layer 3/4, Integration with other third-party softwares for enhanced monitoring and off course user friendly GUI.
    What do you dislike about the product?
    High cost is the major drawback when compared with other competitors in the market. All firewall features are not bundled being said that need licensing for some advanced features. As virtual VM it consumes high amount of resources and need a larger appliance to run VM.
    What problems is the product solving and how is that benefiting you?
    App based filtering, IDS and IPS, enhanced monitoring etc
    Packaging and Containers

    New user experience for threat prevention and Logging

    Reviewed on Feb 04, 2025
    Review provided by G2
    What do you like best about the product?
    The WildFire analysis for detecting zero-day malware is impressive. It quickly flagged a test malware file I uploaded, and I could see real-time analysis.
    What do you dislike about the product?
    The syntax isn’t intuitive for a new user. The logs are detailed but lack context for beginners. I had to refer to external documentation to understand why a session was blocked
    What problems is the product solving and how is that benefiting you?
    Other firewalls struggle to detect unknown or zero-day threats that don’t have existing signatures. WildFire analyzes suspicious files in a cloud-based sandbox and generates new security signatures in real-time

    In most cloud environments, security teams lack clear insights into blocked threats, making incident response slow. After enabling Threat Prevention, I saw multiple intrusion attempts targeting exposed SSH ports.
    The logs showed attack patterns (e.g., brute-force attempts from suspicious IPs in Russia & China).
    Yonnas A.

    Limited, but interesting.

    Reviewed on Jan 28, 2025
    Review provided by G2
    What do you like best about the product?
    I like how it integrates smoothly with other Palo Alto products
    What do you dislike about the product?
    I find the cost to be prohibiotve to my organization
    What problems is the product solving and how is that benefiting you?
    It served as an IDS
    Telecommunications

    Overall a good experience.

    Reviewed on Jan 25, 2025
    Review provided by G2
    What do you like best about the product?
    Scalability:
    Designed to scale from small to very large environments with flexible throughput options.
    What do you dislike about the product?
    Cost:
    For smaller environments or those with tight budgets, this might be a significant barrier.
    What problems is the product solving and how is that benefiting you?
    Security:
    Threat protection, application control, URL filtering, VPN support, and much more.
    Tray J.

    Review Palto Alto

    Reviewed on Jan 24, 2025
    Review provided by G2
    What do you like best about the product?
    I like that Palto Alto VM-Series is simple to use.
    What do you dislike about the product?
    I am not a fan of the high pricing of the Palo Alto VM Series.
    What problems is the product solving and how is that benefiting you?
    It is helping by detecting potential malware by investigesting the signatures.
    View all reviews