Sold by: Palo Alto Networks
Deployed on AWS
Free Trial
The VM-Series Next Generation Firewall (NGFW) gives security teams complete visibility and control over all networks using powerful traffic identification, malware prevention, and threat intelligence technologies.
Overview
VM-Series, when combined with native AWS services, enable you to create "touchless" deployments and allow your developers to operate at the speed of the cloud. VM-Series protects your applications and data using whitelisting and segmentation policies that are dynamically updated based on AWS tags, allowing you to reduce the attack surface area and achieve compliance. Additionally, threat prevention policies can stop both known and unknown attacks.
VM-Series now supports DPDK on the C5, C5n, M5, and M5n instances, running on the AWS Nitro System, to efficiently process traffic and offer increased performance. In addition, Panorama (available separately in Marketplace) allows the VM-Series to be managed centrally alongside our firewall appliances to maintain security policies that are consistent with on-premises environments.
There are three PAYG bundles available. The licenses includes are as follows: Bundle 1: VM-Series+Threat Prevention+USG (US Government) Support Bundle 2: VM-Series+Threat Prevention+URL Filtering+DNS Security+Global Protect+WildFire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-wsu46li6jw3je Bundle 3: VM-Series+Advanced Threat Prevention+Advanced URL Filtering+DNS Security+Global Protect+WildFire+USG (US Government) Support. Link: https://aws.amazon.com/marketplace/pp/prodview-gfbcyenj6z75u
Highlights
- An AWS Network Competency and Security Competency approved solution that complements native AWS security with real-time threat and data theft prevention
- Dynamic and large scale deployments can be protected using AWS Auto Scaling/ELB integration and Transit VPC with AWS Transit Gateway and Gateway Load Balancer
- Amazon GuardDuty and AWS Security Hub integration enables the VM-Series to automatically block potentially malicious activity.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux PAN-OS 11.1.6-h7
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
m5.2xlarge Recommended | $1.45 |
m5.large | $0.79 |
c5n.xlarge | $0.79 |
m5n.large | $0.79 |
m5.4xlarge | $2.88 |
c5.xlarge | $0.79 |
c5.4xlarge | $1.45 |
c5.2xlarge | $0.89 |
c5n.4xlarge | $1.45 |
c5n.2xlarge | $0.89 |
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Resources
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit: https://live.paloaltonetworks.com/aws
For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Palo Alto Networks
By Forcepoint
By Check Point Software Technologies
Top
10
In Log Analysis, Network Infrastructure
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Processing
Supports DPDK on C5, C5n, M5, and M5n instances running on AWS Nitro System for efficient traffic processing
Threat Prevention
Provides dynamic traffic identification, malware prevention, and threat intelligence technologies to stop known and unknown attacks
Security Policy Management
Enables whitelisting and segmentation policies dynamically updated based on AWS tags to reduce attack surface
Cloud Integration
Supports native AWS services integration including Auto Scaling, ELB, Transit VPC, AWS Transit Gateway, and Gateway Load Balancer
Security Monitoring
Integrates with Amazon GuardDuty and AWS Security Hub for automatic blocking of potentially malicious activities
Network Virtualization
Secure virtual private network (VPN) gateway for connecting remote sites and branch offices
Advanced Threat Protection
Dynamic security controls with application layer exfiltration security and advanced evasion techniques (AETs) identification
Intrusion Prevention
Integrated advanced Intrusion Prevention System (IPS) with capability to stop Advanced Evasion Techniques
Security Policy Management
Centralized policy configuration with global update capabilities across network infrastructure
Malware Detection
Sandboxing technology for identifying zero-day attacks and advanced malware
Network Traffic Inspection
Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
Advanced Threat Prevention
Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
Cloud Infrastructure Integration
Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
Security Protocol Coverage
Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
Cloud Service Compatibility
Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway
Standard contract
No
No
No
Customer reviews
4.2
3 ratings
3 AWS reviews
|
105 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Insurance
Amazing virtual firewall
Reviewed on Jun 25, 2025
Review provided by G2
What do you like best about the product?
One of the best to provide security to cloud infrastructures. Posses the ability to inspect the traffic in-depth and analyze before actually processing to the next hop.
What do you dislike about the product?
It’s that it’s virtual. Completely dependent on the physical hardware if it’s hosting multiple vm firewalls. Failure to one physical hardware can lead to multiple vms failure
What problems is the product solving and how is that benefiting you?
As said we use the firewall for in depth inspection of the incoming traffic coming to the corporate network and minimize the risks by providing security to the private and hybrid cloud infrastructures
Retail
Solid Virtual Firewall with Enterprise-Grade Security
Reviewed on Jun 14, 2025
Review provided by G2
What do you like best about the product?
One of the things that really impressed me about Palo Alto Networks VM-Series is how well they’ve integrated machine learning directly into the firewall. It’s not just a buzzword here you can actually see it working.
What do you dislike about the product?
While the security capabilities are excellent, the initial learning curve with Palo Alto VM-Series can be pretty steep, especially if you're new to their platform or coming from more traditional firewall vendors.
What problems is the product solving and how is that benefiting you?
The biggest problem VM-Series is solving for us is securing complex, distributed cloud environments without sacrificing visibility or control. We run workloads across multiple clouds and on-prem, and having a consistent firewall and security policy across all those platforms is a huge win. VM-Series gives us that single security layer no matter where our applications live.
Mitul P.
Palo Alto fIrewall Security product's
Reviewed on Jun 11, 2025
Review provided by G2
What do you like best about the product?
It is easy to deploy where we can save cost of hardware and also managed application security and network traffic in highly secure manner. It is robust and solid products in term security.
What do you dislike about the product?
It is nothing much about firewall products personally to me but need to go with phase by phase when comes to deploying and managing. As new beginner need to learn many things in order to deploy this products
What problems is the product solving and how is that benefiting you?
It is used like managing layer 7 security. Like filtering out Http & https traffic from external clients when accessing internal resources. I deployed in DMZ side and it is very helpful to me when managing network traffic restrictied to dmz which avoid to harm our internal network traiffx when it comes from outside network.
Computer & Network Security
Virtualized Security Excellence if you can afford it
Reviewed on May 07, 2025
Review provided by G2
What do you like best about the product?
I believe what I like the best about these FWs is their Application level visibility. The App-ID tech used in the Firewalls allows us in our environment to control applications on a granular level allowing improved security.
Also the fact they're fairly easy to deploy and implement in any environment our customers have such as VMware, AWS, Azure cloud etc. This helps with the ease of integration within the organizations using multiple cloud solutions.
Also the fact they're fairly easy to deploy and implement in any environment our customers have such as VMware, AWS, Azure cloud etc. This helps with the ease of integration within the organizations using multiple cloud solutions.
What do you dislike about the product?
One con would be that they can have some complex initial configuration and may require special expertise within the customer support environment, which can discourage may discourage smaller organizations from using these as they have slightly high licensing and maintenance costs compared to other Virtual FW solutions.
What problems is the product solving and how is that benefiting you?
They help with the scalability of our setups as they can be used with multiple cloud environments with no limitations such as AWS, Azure, GCP or even VMware
Naveed A.
Good alternative for a hardware firewall
Reviewed on May 05, 2025
Review provided by G2
What do you like best about the product?
I like it has almost the same features as the hardware firewall. It's easy to deploy on any cloud solution like azure,aws. User based policies in VM is a great next step after application segmentation.
Palo Alto support is always great to deal with.
Palo Alto support is always great to deal with.
What do you dislike about the product?
Cost to have and maintain a Palo Alto firewall is always a challenge. It's the same with the VM series as well, being an expensive product.
Reporting seems to be limited as compared to physical firewall. VM Palo Alto doesn't provide hardware acceleration as well.
Reporting seems to be limited as compared to physical firewall. VM Palo Alto doesn't provide hardware acceleration as well.
What problems is the product solving and how is that benefiting you?
We have deployed Palo Alto VM firewall in our vsphere switch which is for protecting our production servers. We have different types of servers deployed on virtualized switch, all the traffic to servers passes through Palo Alto vm. Different application control and web profiles have been setup as per server on VM.
VM is easy to upgrade and keep a check on licenses accordingly. Panorama provides a complete landscape of security which helps us in setting up policies.
VM is easy to upgrade and keep a check on licenses accordingly. Panorama provides a complete landscape of security which helps us in setting up policies.