Sold by: Palo Alto NetworksÂ
Deployed on AWS
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Overview
VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
For BYOL listing, VM-Series license is not included. Please contact your Palo Alto Networks sales representative or channel partner.
Highlights
- An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention.
- Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration and Transit VPC with AWS Transit Gateway and Gateway Load Balancer
- Amazon GuardDuty and AWS Security Hub integration enables the VM-Series to automatically block potentially malicious activity
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 10.2.13-h16
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Resources
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://live.paloaltonetworks.com/aws .For post-sales support, you can use the following options:Call us at 1 (866) 898-9087 Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
VM-Series Virtual Next-Generation Firewall - ARM (BYOL)
By Palo Alto Networks
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
![VM-Series Next-Generation Firewall Bundle 1 [VM-300]](https://d7umqicpi7263.cloudfront.net/img/product/158e08f4-c89e-4567-82e1-f941cf2595ee.jpg)
VM-Series Next-Generation Firewall Bundle 1 [VM-300]
By Palo Alto Networks
The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data theft prevention into their application development workflows. Native AWS services combined with VM-Series automation features allow you to create "touchless" deployments.
Quickstart Service for Software NGFW - VM-Series
By Palo Alto Networks
Our QuickStart Service for Software NGFW – VM-Series on AWS helps you get the most out of your VM-Series Virtual Next-Generation Firewall deployment and investments by assisting with the planning and execution of your implementation. Our expert consultant will remotely configure and deploy the NGFW in your environment. Knowledge transfer to your team is included, as is documentation upon completion of the engagement. The result is a well-planned and accelerated deployment of software NGFW technology, adhering to best practices, to secure your enterprise.
(Federal) VM-Series Virtual NextGen Firewall Bundle2 with 24x7 Support
By Palo Alto Networks
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Customer reviews
3
11 ratings
11 AWS reviews
|
117 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Oil & Energy
Firewall Review
Reviewed on Sep 19, 2025
Review provided by G2
What do you like best about the product?
ease upgrade process and scaling agile, hybride and multi -could , threat prevention , wildfire, prisma cloud , panorama , cortex XDR , redlock , filtrgae
What do you dislike about the product?
The biggest downsides are the cost and complexity. It's an expensive product, both in licensing and the cloud computing power it needs. It's also notoriously complex to master, often requiring dedicated, trained staff to get the most out of it, which adds to the total cost. You're trading top-tier security for a hefty price tag and a steep learning curve.
What problems is the product solving and how is that benefiting you?
The VM-Series solves inconsistent and ineffective security across cloud and virtual data centers by delivering a single, agile policy with advanced threat prevention, reducing risk and cost.
Nicolaos N.
A deep review of Palo Alto Networks VM-Series Virtual Firewall
Reviewed on Sep 18, 2025
Review provided by G2
What do you like best about the product?
One thing i like a lot that it does not lack any features from physical firewalls, almost everything you have and need in physical FW, you can have it on VM-Series. Also i like the depth of the security it provides. Deep pack inspection, user/device context, URL filtering, DNS Security and the list goes on, are must features for any company that takes cybersecurity serioysly.
What do you dislike about the product?
I don't like that in VMware ESXi only certain drivers are supported and i dont like the fact, that except that i think that fully deployment is kinda expensive, also required a lot of resources (CPU, RAM etc) to meet performance requirement.
What problems is the product solving and how is that benefiting you?
The number one problem it solves is about security, more specifically cloud enviromenent without missing any feature or policy from traditional FW. A plus is the deep inspection and monitoring in applications/users.
Robsen W.
As some one working in IT Integrator company, I have had the chance to deploy Paloalto Firewall.
Reviewed on Sep 18, 2025
Review provided by G2
What do you like best about the product?
the fact the firewall goes beyond port and protocol filtering for better Application aware security and the ability to enforce policies based on users using User-ID.
What do you dislike about the product?
even though Palo Alto VM-Series is praised for its security depth, scalability, and AI-driven threat prevention, it is expensive compared with other firewall vendors like fortinet and cisco. I am from Ethiopia and as some one working in IT integrators, many of our clients are a bit sensitive when it comes to price, this makes it difficult in proposing Paloalto firewall for them
What problems is the product solving and how is that benefiting you?
to inspects and segments internal traffic, preventing malware from spreading across workloads (east -west traffics) and to isolate traffics using role-based access and segmentation for different tenants or business units.
Computer & Network Security
highly recommendable—especially for professionals managing hybrid or cloud-centric environments
Reviewed on Sep 18, 2025
Review provided by G2
What do you like best about the product?
Security Efficacy: It topped the SecureIQLab 2024 Cloud Firewall Test, outperforming 11 other vendors in blocking real-world threats, including encrypted SSL/TLS attacks.
Cloud Flexibility: Supports AWS, Azure, GCP, VMware, KVM, Nutanix, and more—ideal for virtualized deployments across platforms.
Zero Trust & Deep Inspection: Offers App-ID, User-ID, Device-ID, and inline deep learning to detect zero-day threats
Cloud Flexibility: Supports AWS, Azure, GCP, VMware, KVM, Nutanix, and more—ideal for virtualized deployments across platforms.
Zero Trust & Deep Inspection: Offers App-ID, User-ID, Device-ID, and inline deep learning to detect zero-day threats
What do you dislike about the product?
Complex Configuration & Learning Curve
Initial setup and policy tuning can be intimidating, especially for teams new to Palo Alto’s architecture.
Advanced features like App-ID and User-ID require deep understanding to avoid misconfigurations.
2. Licensing & Cost Structure
Licensing via Software NGFW credits can be confusing and expensive for smaller deployments.
Initial setup and policy tuning can be intimidating, especially for teams new to Palo Alto’s architecture.
Advanced features like App-ID and User-ID require deep understanding to avoid misconfigurations.
2. Licensing & Cost Structure
Licensing via Software NGFW credits can be confusing and expensive for smaller deployments.
What problems is the product solving and how is that benefiting you?
1. Cloud Visibility & Control
Problem: Native cloud security tools often lack deep traffic inspection and granular control.
Solution: VM-Series provides full traffic visibility, App-ID, and threat prevention across AWS, Azure, GCP, and more.
2. Zero-Day & Lateral Threats
Problem: Malware and exploits can move laterally between virtual workloads undetected.
Solution: Inline deep learning and segmentation stop threats in real time—even across microsegments.
Problem: Native cloud security tools often lack deep traffic inspection and granular control.
Solution: VM-Series provides full traffic visibility, App-ID, and threat prevention across AWS, Azure, GCP, and more.
2. Zero-Day & Lateral Threats
Problem: Malware and exploits can move laterally between virtual workloads undetected.
Solution: Inline deep learning and segmentation stop threats in real time—even across microsegments.
abdelazize s.
Experience and Elegance
Reviewed on Sep 17, 2025
Review provided by G2
What do you like best about the product?
The best aspects of the Palo Alto Networks VM-Series Virtual Firewall include its advanced threat prevention capabilities, consistent security policy enforcement across diverse environments, scalability and agility in virtualized settings, centralized management through Panorama, and seamless integration with major cloud and virtualization platforms.
What do you dislike about the product?
Documentation Gaps: Occasionally, users find the documentation to be less comprehensive for newer features or unique deployment scenarios, which can complicate implementation and troubleshooting efforts.
What problems is the product solving and how is that benefiting you?
Compliance and Risk Management: Aids in meeting regulatory compliance standards by enabling features like application allow listing and segmentation, crucial for isolating sensitive data and systems.