Sold by: Palo Alto Networks
Deployed on AWS
Free Trial
The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data theft prevention into their application development workflows. Native AWS services combined with VM-Series automation features allow you to create "touchless" deployments.
Overview
IMPORTANT: This listing will be restricted starting from 05/11. Please consider using https://aws.amazon.com/marketplace/pp/B083M7JPKB instead.
The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data loss prevention into their application development workflows. Your applications and data are protected with whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
Bundle 1 includes Threat Prevention (IDS/IPS) subscription and Premium Support. Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policy that is consistent with on-premises environments.
Note: With PAN-OS 9.0.3.xfr and 9.1.0, VM-Series now supports DPDK on the C5 and M5 instances to efficiently process traffic and offer increased performance. If you are switching your VM-Series to C5/M5, we recommend you to migrate the configuration from the old instance to the new C5/M5 instance.
Highlights
- An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention
- Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration and Transit VPC with AWS Transit Gateway
- Amazon GuardDuty and AWS Security Hub integration enables the VM-Series to automatically block potentially malicious activity.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux PAN-OS 8.1.25-h1
Deployed on AWS
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m5.xlarge Recommended | $0.87 |
m4.xlarge | $0.87 |
c5n.9xlarge | $0.87 |
m5.12xlarge | $0.87 |
m3.xlarge | $0.87 |
m5.24xlarge | $0.87 |
m5n.xlarge | $0.87 |
m3.2xlarge | $0.87 |
m5n.2xlarge | $0.87 |
m4.2xlarge | $0.87 |
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Support
Vendor support
Premium support is available as part of this offering once the VM-Series firewall has been deployed and configured. To help you get started, how-to videos, deployment guides, reference architectures and discussion forums are available on our VM-Series on AWS resource page. The resource page will also allow you to register your firewall and contact support 24/7 in the event that you encounter critical or complex issues once the deployment has completed. http://live.paloaltonetworks.com/aws
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
VM-Series Virtual Next-Generation Firewall (BYOL)
By Palo Alto Networks
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Quickstart Service for Software NGFW - VM-Series
By Palo Alto Networks
Our QuickStart Service for Software NGFW – VM-Series on AWS helps you get the most out of your VM-Series Virtual Next-Generation Firewall deployment and investments by assisting with the planning and execution of your implementation. Our expert consultant will remotely configure and deploy the NGFW in your environment. Knowledge transfer to your team is included, as is documentation upon completion of the engagement. The result is a well-planned and accelerated deployment of software NGFW technology, adhering to best practices, to secure your enterprise.
(Federal) VM-Series Virtual NextGen Firewall Bundle2 with 24x7 Support
By Palo Alto Networks
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
VM-Series Virtual Next-Generation Firewall - ARM (BYOL)
By Palo Alto Networks
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Customer reviews
Eren Y.
Great product, allows for at home use and connection to company systems
Reviewed on May 13, 2025
Review provided by G2
What do you like best about the product?
Palo Alto firewall allowed easy user-interface to select gateway location for ease of access in connecting and using VPN to work from home, keeping DoD related material and servers safekeeping.
What do you dislike about the product?
Product sometimes automatically connects me to a wrong gateway VPN location, for example instead of Southeast, it will use North America which will increase latency and work server access delays.
What problems is the product solving and how is that benefiting you?
PA NG Firewalls solving the need for safekeeping multinational company resources and collaborative use with ease of access including company internal websites and sensitive business trade secrets.
Leave a comment0 comments
Dipal P.
Palo Alto Networks!
Reviewed on May 06, 2025
Review provided by G2
What do you like best about the product?
Palo Alto Networks Next-Generation Firewalls stand out for their deep visibility and granular control over network traffic, allowing precise policy enforcement. Their integration of threat intelligence with real-time updates through WildFire enhances zero-day protection. The unified management interface simplifies administration across distributed environments. Additionally, their strong application awareness and user identification features make them especially effective for securing modern, hybrid networks.
What do you dislike about the product?
One downside is the steep learning curve, especially for teams new to Palo Alto’s ecosystem. Licensing and subscriptions can also be complex and expensive, which may be a barrier for smaller organizations. Additionally, software updates occasionally introduce bugs that require careful testing before deployment.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks NGFWs are solving problems related to advanced threat detection, application visibility, and secure access control. By identifying and blocking malware, ransomware, and unauthorized applications in real time, they significantly reduce our exposure to cyber risks. The ability to create granular policies based on users and apps, not just IPs and ports, enhances both security and operational efficiency. This has helped us streamline compliance efforts and reduce incident response times.
Banking
It's really good at protecting my data.
Reviewed on May 05, 2025
Review provided by G2
What do you like best about the product?
The thing I liked the most is the pricing and policies that is based on the user activities. So, it means your are actually protecting our data. Which is also a drawback sometimes because we don't need all the security every time but should be enabled.
What do you dislike about the product?
I didn't face any issues but, your high end security level. that is enabling everything even if we don't use it all the time leads to slowing system and delays tasks, especially for low end systems.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks Next-Generation Firewalls are solving a lot of problems related to visibility and control over our network traffic. Before using them we had a tough time identifying what applications were being used and blocking unwanted traffic. With the App-ID feature we can now see and control apps no matter what port or protocol they're using. This has helped us reduce shadow IT and apply more accurate security policies. Another big issue was dealing with threats and malware, the integration with WildFire really helps by detecting and stopping threats in real time before they spread across the network. We also benefit from the User-ID feature which ties traffic to specific users not just IP addresses making auditing and policy enforcement a lot more precise. Overall it has made our network more secure and easier to manage even if the setup was a bit tricky in the beginning.
Computer Software
Adaptation
Reviewed on Apr 25, 2025
Review provided by G2
What do you like best about the product?
I appreciate the flexibility—Palo Alto Networks firewalls adapt well to various environments while offering strong, intelligent, and reliable protection.
What do you dislike about the product?
The initial setup can be complex, and there’s a noticeable learning curve before fully leveraging the full range of advanced features and capabilities.
What problems is the product solving and how is that benefiting you?
It protects against advanced threats, secures apps and users, and prevents data breaches—helping us stay compliant, safe, and efficient across our network.
Akshay G.
Good security and simple interface.
Reviewed on Apr 22, 2025
Review provided by G2
What do you like best about the product?
What I like most is how much control and visibility they give you. Being able to manage traffic based on specific applications and users makes a big difference in keeping things secure without slowing everything down. Also, the way it works with GlobalProtect is super smooth, remote access feels just as secure as being on-site.
What do you dislike about the product?
The interface can be a bit overwhelming at times, especially if you’re not used to it. Some settings feel buried or harder to find than they should be. Also, updates and policy changes sometimes take a bit longer to push through, which can slow things down when you’re in a hurry.
What problems is the product solving and how is that benefiting you?
It’s helping solve the challenge of managing secure access for remote users and keeping the network protected from modern threats. With features like threat prevention, URL filtering, and application control, it cuts down on the risk of attacks slipping through. Personally, it gives me peace of mind knowing that even when I’m working remotely through GlobalProtect, the same level of security is in place as if I was in the office.