Listing Thumbnail

    VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG)

     Info
    Deployed on AWS
    Free Trial
    Protect AWS workloads, VDIs, and user traffic with AI/ML-powered virtual firewall from Palo Alto Networks. This listing includes VM-Series virtual firewall, Palo Alto Networks flagship - Advanced Threat Prevention security service and 24x7 premium technical support

    Overview

    Play video

    This offering includes a free, 15-day trial. Go beyond base layer 3, 4 protection with industry leading firewall in the cloud-native form factor that seamlessly integrates and scales with your AWS environment.

    02/01/24 UPDATE - This listing now includes Palo Alto Networks Advanced Threat Prevention cloud-delivered Security Service. ATP increases firewalls efficacy against zero day and other resilient threats (requires PAN-OS versions 10.2.8, 11.0.4, 11.1.2 or later).

    Next-Gen Security - protect business critical data with VM-Series virtual firewalls that give you complete application layer-7 visibility and control of your traffic in your AWS environment.

    Easy deployment - get started with a few clicks and deploy additional firewalls through the familiar EC2 instance creation flow.

    Simplified policy management - means your policies adapt to changes in your AWS infrastructure while keeping your resources protected in a consistent manner without manual intervention by the FW admin.

    Threat coverage - keep your workloads safe from threats with industry-leading traffic inspection.

    This listing also includes Palo Alto Networks Advanced Threat Prevention service which safeguards your network from known and zero day threats, such as exploits, malware, spyware, and command and control attacks, with market-leading, researcher-grade signatures and ML inspection engine that do not compromise performance.

    Looking for higher levels of security? Try the following PAYG listing to provide higher level of security to your AWS infrastructure:

    VM-Series Next-Generation Virtual Firewall w/ Advanced Security Subs (PAYG). See link below:

    https://aws.amazon.com/marketplace/pp/prodview-3xtziatyes54i?sr=0-8&ref_=beagle&applicationId=AWSMPContessa 

    Highlights

    • Best-in-class public cloud network security solution powered by AI/ML and latest threat research protects your workloads against day zero and known threats with application layer 7 visibility
    • Integrations with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway allow you to protect traffic across many types of dynamic and large scale deployments
    • Policy definitions dynamically apply to your cloud assets based on AWS tags, Application IDs, User IDs, geographies or zones.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux PAN-OS 10.2.13-h16

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG)

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (42)

     Info
    Dimension
    Cost/hour
    c5n.xlarge
    Recommended
    $1.17
    m5n.large
    $0.99
    m5.4xlarge
    $3.69
    m4.4xlarge
    $3.69
    c6a.4xlarge
    $3.69
    m6in.4xlarge
    $3.69
    c6a.2xlarge
    $1.80
    m5.large
    $0.99
    m6in.2xlarge
    $1.80
    m4.large
    $0.99

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.

    Support

    Vendor support

    To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit:

    https://live.paloaltonetworks.com/aws 

    For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Network Infrastructure
    Top
    10
    In Log Analysis, Network Infrastructure

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Network Traffic Inspection
    Advanced layer-7 application visibility and control with comprehensive traffic inspection capabilities
    Threat Prevention Technology
    AI/ML-powered security engine with researcher-grade signatures for detecting known and zero-day threats
    Cloud Security Integration
    Native integration with AWS infrastructure components including Gateway Load Balancer, Auto Scaling, and Transit VPC
    Dynamic Policy Management
    Automated policy application using AWS tags, Application IDs, User IDs, geographies, and network zones
    Deployment Flexibility
    Seamless deployment through EC2 instance creation workflow with cloud-native form factor
    Network Virtualization
    Secure virtual private network (VPN) gateway for connecting remote sites and branch offices
    Advanced Threat Protection
    Dynamic security controls with application layer exfiltration security and advanced evasion techniques (AETs) identification
    Intrusion Prevention
    Integrated advanced Intrusion Prevention System (IPS) with capability to stop Advanced Evasion Techniques
    Security Policy Management
    Centralized policy configuration with global update capabilities across network infrastructure
    Malware Detection
    Sandboxing technology for identifying zero-day attacks and advanced malware
    Network Traffic Inspection
    Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
    Advanced Threat Prevention
    Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
    Cloud Infrastructure Integration
    Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
    Security Protocol Coverage
    Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
    Cloud Service Compatibility
    Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    3.7
    5 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    20%
    60%
    0%
    0%
    20%
    5 AWS reviews
    |
    117 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Oil & Energy

    Firewall Review

    Reviewed on Sep 19, 2025
    Review provided by G2
    What do you like best about the product?
    ease upgrade process and scaling agile, hybride and multi -could , threat prevention , wildfire, prisma cloud , panorama , cortex XDR , redlock , filtrgae
    What do you dislike about the product?
    The biggest downsides are the cost and complexity. It's an expensive product, both in licensing and the cloud computing power it needs. It's also notoriously complex to master, often requiring dedicated, trained staff to get the most out of it, which adds to the total cost. You're trading top-tier security for a hefty price tag and a steep learning curve.
    What problems is the product solving and how is that benefiting you?
    The VM-Series solves inconsistent and ineffective security across cloud and virtual data centers by delivering a single, agile policy with advanced threat prevention, reducing risk and cost.
    Nicolaos N.

    A deep review of Palo Alto Networks VM-Series Virtual Firewall

    Reviewed on Sep 18, 2025
    Review provided by G2
    What do you like best about the product?
    One thing i like a lot that it does not lack any features from physical firewalls, almost everything you have and need in physical FW, you can have it on VM-Series. Also i like the depth of the security it provides. Deep pack inspection, user/device context, URL filtering, DNS Security and the list goes on, are must features for any company that takes cybersecurity serioysly.
    What do you dislike about the product?
    I don't like that in VMware ESXi only certain drivers are supported and i dont like the fact, that except that i think that fully deployment is kinda expensive, also required a lot of resources (CPU, RAM etc) to meet performance requirement.
    What problems is the product solving and how is that benefiting you?
    The number one problem it solves is about security, more specifically cloud enviromenent without missing any feature or policy from traditional FW. A plus is the deep inspection and monitoring in applications/users.
    Robsen W.

    As some one working in IT Integrator company, I have had the chance to deploy Paloalto Firewall.

    Reviewed on Sep 18, 2025
    Review provided by G2
    What do you like best about the product?
    the fact the firewall goes beyond port and protocol filtering for better Application aware security and the ability to enforce policies based on users using User-ID.
    What do you dislike about the product?
    even though Palo Alto VM-Series is praised for its security depth, scalability, and AI-driven threat prevention, it is expensive compared with other firewall vendors like fortinet and cisco. I am from Ethiopia and as some one working in IT integrators, many of our clients are a bit sensitive when it comes to price, this makes it difficult in proposing Paloalto firewall for them
    What problems is the product solving and how is that benefiting you?
    to inspects and segments internal traffic, preventing malware from spreading across workloads (east -west traffics) and to isolate traffics using role-based access and segmentation for different tenants or business units.
    Computer & Network Security

    highly recommendable—especially for professionals managing hybrid or cloud-centric environments

    Reviewed on Sep 18, 2025
    Review provided by G2
    What do you like best about the product?
    Security Efficacy: It topped the SecureIQLab 2024 Cloud Firewall Test, outperforming 11 other vendors in blocking real-world threats, including encrypted SSL/TLS attacks.

    Cloud Flexibility: Supports AWS, Azure, GCP, VMware, KVM, Nutanix, and more—ideal for virtualized deployments across platforms.

    Zero Trust & Deep Inspection: Offers App-ID, User-ID, Device-ID, and inline deep learning to detect zero-day threats
    What do you dislike about the product?
    Complex Configuration & Learning Curve
    Initial setup and policy tuning can be intimidating, especially for teams new to Palo Alto’s architecture.

    Advanced features like App-ID and User-ID require deep understanding to avoid misconfigurations.

    2. Licensing & Cost Structure
    Licensing via Software NGFW credits can be confusing and expensive for smaller deployments.
    What problems is the product solving and how is that benefiting you?
    1. Cloud Visibility & Control
    Problem: Native cloud security tools often lack deep traffic inspection and granular control.

    Solution: VM-Series provides full traffic visibility, App-ID, and threat prevention across AWS, Azure, GCP, and more.

    2. Zero-Day & Lateral Threats
    Problem: Malware and exploits can move laterally between virtual workloads undetected.

    Solution: Inline deep learning and segmentation stop threats in real time—even across microsegments.
    abdelazize s.

    Experience and Elegance

    Reviewed on Sep 17, 2025
    Review provided by G2
    What do you like best about the product?
    The best aspects of the Palo Alto Networks VM-Series Virtual Firewall include its advanced threat prevention capabilities, consistent security policy enforcement across diverse environments, scalability and agility in virtualized settings, centralized management through Panorama, and seamless integration with major cloud and virtualization platforms.
    What do you dislike about the product?
    Documentation Gaps: Occasionally, users find the documentation to be less comprehensive for newer features or unique deployment scenarios, which can complicate implementation and troubleshooting efforts.
    What problems is the product solving and how is that benefiting you?
    Compliance and Risk Management: Aids in meeting regulatory compliance standards by enabling features like application allow listing and segmentation, crucial for isolating sensitive data and systems.
    View all reviews