The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
Highlights
An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention
Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration and Transit VPC with AWS Transit Gateway and Gateway Load Balancer
Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration and Transit VPC with AWS Transit Gateway and Gateway Load Balancer
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for this virtual firewall, based on the ARM-based Amazon EC2 instance type you run. Billing is usage-based, so charges accrue only while an instance is running. The dimensions map to specific instance families: t4g, m6g, and m6gd sizes ranging from large up to metal. Larger sizes provide more compute capacity and carry a higher hourly rate. The m6gd options include local instance storage, while m6g options do not. You choose the instance that fits your performance and capacity needs, and can run several instances to scale.
Top-of-mind questions for buyers
What does one billed unit represent for these dimensions?
One unit is one running instance-hour of the ARM-based Amazon EC2 instance type you launch. Each firewall instance meters separately. If you run several instances, each one accrues its own hourly charge. The instance family and size you pick set the hourly rate.
Am I charged when a firewall instance is stopped or powered off?
Software charges meter running time only, so a fully stopped instance stops accruing hourly firewall charges. Stopped instances may still incur underlying AWS storage fees for attached volumes. To avoid firewall charges entirely, stop or terminate instances you are not using.
What is the difference between the m6g and m6gd instance options?
Both run the same virtual firewall software and bill by the hour. The m6gd sizes include local NVMe instance storage attached to the host, while m6g sizes do not. Choose m6gd if your deployment benefits from local storage; otherwise m6g covers standard needs. Larger sizes add compute capacity and cost more per hour.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://live.paloaltonetworks.com/aws For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Our QuickStart Service for Software NGFW – VM-Series on AWS helps you get the most out of your VM-Series Virtual Next-Generation Firewall deployment and investments by assisting with the planning and execution of your implementation. Our expert consultant will remotely configure and deploy the NGFW in your environment. Knowledge transfer to your team is included, as is documentation upon completion of the engagement. The result is a well-planned and accelerated deployment of software NGFW technology, adhering to best practices, to secure your enterprise.
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
Protect AWS workloads, VDIs, and user traffic with AI/ML-powered virtual firewall from Palo Alto Networks. This listing includes VM-Series virtual firewall, Palo Alto Networks flagship - Advanced Threat Prevention security service and 24x7 premium technical support
Consistent On-Prem and Cloud Security with Deep App Awareness
Reviewed on Jan 20, 2026
Review provided by G2
What do you like best about the product?
What I like most about Palo Alto Networks VM-Series Virtual Firewall is the consistency it brings between on-premises and cloud security. The same App-ID, User-ID and Threat Prevention capabilities available on physical firewalls are preserved in virtualized and cloud environments. This makes it easier to enforce uniform security policies, reduce operational complexity, and integrate with centralized management. Its deep application awareness, strong threat intelligence, and cloud-native deployment models enable strong security controls without sacrificing visibility or control in dynamic cloud architectures.
What do you dislike about the product?
One of the main downsides of Palo Alto Networks VM-Series Virtual Firewall is its cost and licensing complexity, which can be challenging, especially in highly large-scale cloud environments. Additionally, performance tuning and sizing require careful planning, as improper instance selection can lead to unexpected throughput limitations.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks VM-Series Virtual Firewall helps us address the complexity of securing hybrid cloud environments while maintaining the same security posture as on-premises. It solves challenges around consistent traffic inspection, east-west and north-south visibility, advanced threat prevention, and granular application-level control in the cloud. By using VM-Series, we benefit from centralized policy management, uniform security controls across data centers and cloud workloads, improved compliance, and reduced operational risk when scaling or redesigning cloud architectures.
Seid H.
Consistent Security and Powerful Cloud Integration
Reviewed on Dec 16, 2025
Review provided by G2
What do you like best about the product?
What I like best about Palo Alto Networks VM-Series Virtual Firewall is:
Consistent NGFW security across on-prem and cloud
App-ID, User-ID, and Threat Prevention for deep visibility and control
Strong cloud and automation support (AWS, Azure, GCP, Terraform, APIs)
Centralized management with Panorama
What do you dislike about the product?
What I dislike about Palo Alto Networks VM-Series Virtual Firewall:
High cost, especially with licenses and subscriptions
Complex initial setup for new users
Resource-intensive (needs strong CPU/RAM for good performance)
Throughput depends heavily on cloud instance sizing
Advanced features require multiple licenses
What problems is the product solving and how is that benefiting you?
Inconsistent security in cloud and on-prem → same NGFW policies everywhere
Lack of visibility → app- and user-level control
Cloud security gaps → protects virtual workloads
Manual deployments → automation and central management
Bereket N.
Experience on palo alto vm Series Firewall
Reviewed on Nov 05, 2025
Review provided by G2
What do you like best about the product?
The most i like is its cost and it has more capable as the physical one and also as long as you purchase it you can get it no pending time west in manfacturing
What do you dislike about the product?
While enabling advanced features it has the most difficualt configurations by itself and also haively depends on the server capacity or resource is needed
What problems is the product solving and how is that benefiting you?
As i said previously you can save time of munfacturing, cost and also defending the network infrastructure with palo alto makes secure with tight security profiles
Oluwaseun A.
Seamless Deployment with Robust Security
Reviewed on Nov 04, 2025
Review provided by G2
What do you like best about the product?
I really appreciate the ease of configuration provided by the Palo Alto Networks VM-Series Virtual Firewall. The user interface and experience (UI/UX) make it very straightforward and intuitive for someone like me to configure and manage the firewall effectively. This seamless interface significantly aids in deploying the firewall into our infrastructure without much hassle. Additionally, the support from Palo Alto Networks during deployment was invaluable, allowing us to implement the firewall quickly and efficiently. The integration into our network was smooth, enhancing our productivity by enabling us to perform large configurations and then focus our efforts on other tasks. Overall, this firewall is incredibly efficient and productive, ensuring we're able to perform our security functions effectively as a team.
What do you dislike about the product?
I feel that the integration of more AI capabilities into the Palo Alto Networks VM-Series Virtual Firewall could significantly elevate its functionality. Although there are current functions that touch on this, a more comprehensive AI integration would enhance the ability to analyze incoming logs and automatically generate a visual representation of the network's status. This would be incredibly beneficial for quickly understanding what's happening within the network and for generating management and board reports without needing to manually interpret raw data or logs.
What problems is the product solving and how is that benefiting you?
I use Palo Alto Networks VM-Series Virtual Firewall for deep packet filtering, enhancing our security by blocking outside threats and analyzing traffic logs. It simplifies configuration and deployment, making our work more efficient and productive.
Security and Investigations
User-Friendly Interface and Robust Support Make It Stand Out
Reviewed on Nov 04, 2025
Review provided by G2
What do you like best about the product?
What I find most helpful is the level of granular visibility it provides, which is essential for my work in the SOC. The App-ID and User-ID features are incredibly powerful.
What do you dislike about the product?
The primary downside is the complexity and high cost of the licensing model. It feels like every essential security feature is a separate, expensive subscription.
What problems is the product solving and how is that benefiting you?
The primary business problem the VM-Series solves for us is extending consistent, next-generation security to our virtualized and cloud environments .