Sold by: Palo Alto Networks
Deployed on AWS
Free Trial
Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
4.3
Overview
This offering includes a free, 15-day trial. Go beyond base layer 3, 4 protection with industry leading firewall and a comprehensive suite of security services in a cloud-native form factor that seamlessly integrate and scale with your AWS environment.
02/01 UPDATE - This listing now includes Palo Alto Networks Advanced cloud-delivered Security Services. These services increase firewall efficacy against zero day and other resilient threats (requires PAN-OS versions 10.2.8, 11.0.4, 11.1.2 or later).
Threat coverage - keep your workloads safe from exploits, malware, command & control attempts, web-based threats, DNS-layer attacks, file-based threats and malware piggybacking on mobile users traffic with industry-leading traffic inspection. The following security services that are available with this product listing:
Note: To activate below services, follow the steps in https://shorturl.at/mnsJ1 to register your firewall
-
Advanced Threat Prevention - safeguard your network from known and zero day threats, such as exploits, malware, spyware, and command and control attacks, with market-leading, researcher-grade signatures and ML inspection engine that do not compromise performance.
-
Advanced URL Filtering - defend your network from highly evasive phishing, ransomware and other web-based attacks. Palo Alto Networks inline machine learning-based web security engine enables real-time detection of previously unseen threats to prevent patient zero. Create granular policy controls that dynamically update as new malicious URLs are discovered.
-
Advanced WildFire - identify file-based threats through inline static and dynamic analysis in the cloud. Palo Alto Networks proprietary hypervisor enables detection of sophisticated sandbox-resistant malware, extending your coverage to these previously unseen threats. Advanced Wildfire adds real-time threat signature updates for your Advanced Threat Prevention service.
-
DNS Security - extend your threat coverage by detecting and preventing sophisticated DNS-layer network attacks and data exfiltration.
-
Global Protect - secure your infrastructure from malware and threats that can piggyback on traffic from mobile users.
Simplified policy management - means your policies adapt to changes in your AWS infrastructure while keeping your resources protected in a consistent manner without manual intervention by the FW admin.
Next-Gen Security - protect business critical data with VM-Series virtual firewalls that give you complete application layer-7 visibility and control of your traffic in your AWS environment.
Easy deployment - get started with a few clicks and deploy additional firewalls through the familiar EC2 instance creation flow.
Looking for a lighter version with reduced costs? Try our VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG). See the link below.
Highlights
- Best-in-class public cloud network security solution powered by AI/ML and latest threat research protects your workloads against day zero and known threats with application layer 7 visibility.
- Integrations with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway allow you to protect traffic across many types of dynamic and large scale deployments.
- Policy definitions dynamically apply to your cloud assets based on AWS tags, Application IDs, User IDs, geographies or zones.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 11.1.15
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c5n.xlarge Recommended | $1.71 |
c5d.large | $1.35 |
c6in.2xlarge | $2.43 |
c6i.4xlarge | $4.32 |
c5d.xlarge | $1.71 |
c5.xlarge | $1.71 |
c4.8xlarge | $4.32 |
c6i.2xlarge | $2.43 |
c5d.4xlarge | $4.32 |
c6i.xlarge | $1.71 |
Dimensions summary
You pay by the hour based on the AWS EC2 instance size you run the virtual firewall on. Each dimension maps to a specific instance type across the c4, c5, c5d, c5n, c6a, c6i, c6in, m4, m5, m5n, and m6in families. Larger instances carry more compute and memory, so hourly rates rise with instance capacity. There are no upfront commitments or fixed terms. You choose the instance that fits your throughput needs and pay only for the hours you use. The Advanced Security subscriptions are included in this usage-based rate.
Top-of-mind questions for buyers
Each dimension bills per hour for one running instance of the virtual firewall on the matching AWS EC2 instance type. You pay for each firewall instance you launch, metered by the hours it runs. Running two instances of the same type doubles the hourly charge.
Software charges meter running instance-hours only. A fully stopped instance stops accruing the hourly firewall charge. You may still pay underlying AWS fees for storage or other resources tied to that instance, but the firewall software licence bills active running time.
The Advanced Security subscriptions are bundled into the usage-based hourly charge. This includes Layer 7 traffic inspection, threat prevention, and web filtering that detects known and unknown web-based threats. You do not pay separate subscription fees for these features on top of the instance-hour rate.
www.paloaltonetworks.com
Helpful?
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit:
https://live.paloaltonetworks.com/aws
For post-sales support, you can use the following options: Call us at 1 (866) 898-9087
Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Palo Alto Networks
By Forcepoint
By Check Point Software Technologies
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Intrusion Prevention System
Leading Intrusion Prevention System (IPS) integrated into unified security solution for threat detection and prevention
Advanced Evasion Technique Detection
Capability to identify and stop Advanced Evasion Techniques (AETs) with superior performance compared to other security devices
Application Layer Security
Advanced application control with application layer exfiltration security and dynamic security controls
Sandboxing and Malware Analysis
Sandboxing technology for identifying zero-day attacks and advanced malware threats
Centralized Management Console
Unified management console for streamlined security administration across data center, office, and branch firewalls
Advanced Threat Prevention Capabilities
Includes firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot features for multi-layered network security.
Traffic Inspection and Control
Inspects and controls encrypted data flows between on-premises networks and AWS VPCs, including North-South traffic entering and exiting private subnets and East-West traffic between VPCs.
Infrastructure-as-Code Integration
Integrates with infrastructure-as-code tools including Terraform and Ansible for policy automation, with dynamic security policy adaptation based on real-time cloud metadata.
AWS Service Integration
Supports integration with Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Centralized Security Management
Provides unified, centralized management through Check Point Security Management Server with consistent policy, logging, and reporting across AWS, hybrid, and on-premises environments.
Standard contract
No
No
No
Customer reviews
Defense & Space
Consistent On-Prem and Cloud Security with Deep App Awareness
Reviewed on Jan 20, 2026
Review provided by G2
What do you like best about the product?
What I like most about Palo Alto Networks VM-Series Virtual Firewall is the consistency it brings between on-premises and cloud security. The same App-ID, User-ID and Threat Prevention capabilities available on physical firewalls are preserved in virtualized and cloud environments. This makes it easier to enforce uniform security policies, reduce operational complexity, and integrate with centralized management. Its deep application awareness, strong threat intelligence, and cloud-native deployment models enable strong security controls without sacrificing visibility or control in dynamic cloud architectures.
What do you dislike about the product?
One of the main downsides of Palo Alto Networks VM-Series Virtual Firewall is its cost and licensing complexity, which can be challenging, especially in highly large-scale cloud environments. Additionally, performance tuning and sizing require careful planning, as improper instance selection can lead to unexpected throughput limitations.
What problems is the product solving and how is that benefiting you?
Palo Alto Networks VM-Series Virtual Firewall helps us address the complexity of securing hybrid cloud environments while maintaining the same security posture as on-premises. It solves challenges around consistent traffic inspection, east-west and north-south visibility, advanced threat prevention, and granular application-level control in the cloud. By using VM-Series, we benefit from centralized policy management, uniform security controls across data centers and cloud workloads, improved compliance, and reduced operational risk when scaling or redesigning cloud architectures.
Seid H.
Consistent Security and Powerful Cloud Integration
Reviewed on Dec 16, 2025
Review provided by G2
What do you like best about the product?
What I like best about Palo Alto Networks VM-Series Virtual Firewall is:
Consistent NGFW security across on-prem and cloud
App-ID, User-ID, and Threat Prevention for deep visibility and control
Strong cloud and automation support (AWS, Azure, GCP, Terraform, APIs)
Centralized management with Panorama
Consistent NGFW security across on-prem and cloud
App-ID, User-ID, and Threat Prevention for deep visibility and control
Strong cloud and automation support (AWS, Azure, GCP, Terraform, APIs)
Centralized management with Panorama
What do you dislike about the product?
What I dislike about Palo Alto Networks VM-Series Virtual Firewall:
High cost, especially with licenses and subscriptions
Complex initial setup for new users
Resource-intensive (needs strong CPU/RAM for good performance)
Throughput depends heavily on cloud instance sizing
Advanced features require multiple licenses
High cost, especially with licenses and subscriptions
Complex initial setup for new users
Resource-intensive (needs strong CPU/RAM for good performance)
Throughput depends heavily on cloud instance sizing
Advanced features require multiple licenses
What problems is the product solving and how is that benefiting you?
Palo Alto Networks VM-Series Virtual Firewall solves:
Inconsistent security in cloud and on-prem → same NGFW policies everywhere
Lack of visibility → app- and user-level control
Cloud security gaps → protects virtual workloads
Manual deployments → automation and central management
Inconsistent security in cloud and on-prem → same NGFW policies everywhere
Lack of visibility → app- and user-level control
Cloud security gaps → protects virtual workloads
Manual deployments → automation and central management
MuhammadNadeem
Has supported urgent deployments and enabled inline threat protection but pricing and features could be more flexible
Reviewed on Nov 06, 2025
Review provided by PeerSpot
What is our primary use case?
I am not working on a NAC solution. I am working on Palo Alto Networks VM-Series firewall, and I am mainly working with firewalls.
I am totally working with Palo Alto Networks VM-Series products. I am working with VMs, including 400 series, 1400 series, and 3400 series firewalls, which are next-generation firewalls and fourth-generation firewalls of Palo Alto Networks VM-Series.
I am also working with VMs for Palo Alto Networks VM-Series, and for POCs sometimes. Mostly, I provide solutions for some of our customers who need urgent solutions with Palo Alto Networks VM-Series. I provide them VMs and activate the licenses from Palo Alto as a partner. We are working as innovator partners with Palo Alto. Sometimes for POCs and for urgent solutions, if the customer or some organization needs it, we provide them Palo Alto Networks VM-Series and it works fine.
We are working with Dynamic Address Groups in Palo Alto Networks VM-Series. Mostly, we use them for securing our network and for blocking malicious traffic from specific sources around the globe. We block them through Dynamic Address Groups as a source and create another policy for that. We block any dynamic addresses coming with malicious traffic using specific policies. We use Dynamic Address Groups and after tagging those malicious IPs, when they come to our firewall from outside or from inside, including some of our local computers, if we detect something concerning such as bots or similar traffic, we block them using Dynamic Address Groups.
Advanced Threat Protection is working in Palo Alto Networks VM-Series. In Advanced Threat Protection, we use inline protection features, including anti-malware solutions and vulnerability protection. We mostly use Advanced Threat Protection because Palo Alto provides the core subscription and core security bundle, which is cheaper than the other bundle. We propose the same bundle to customers because it is cheaper and includes DNS security, SD-WAN, vulnerability protection, URL filtering, anti-spyware, and antivirus subscriptions bundled in the same core bundle. If I buy only threat protection separately, it is more expensive than this bundle. We create security profiles for spyware and antivirus and provide inline protection to customers.
What is most valuable?
App-IDs in Palo Alto Networks VM-Series are very important and working fine. We mostly use App-IDs due to which we are securing customers who are vulnerable and who need security solutions.
There are Dynamic Address Groups, EDLs, and integration with other solutions such as Forescout for Palo Alto Networks VM-Series, which we did two years ago. There are API integrations as well. We mostly automate the security structure for the organization using SIEM solutions, integration with SIEM solutions, and XDR solutions. This is very interesting.
What needs improvement?
I am not using Palo Alto Networks VM-Series mostly, but based on my experience, there are some deficiencies in Palo Alto Networks VM-Series. Having those features missing, we are not proposing Palo Alto Networks VM-Series to all customers. However, for urgency and for some solutions that customers need for some of their other sites and subdivisions, we are providing the same.
For how long have I used the solution?
I have been working with Palo Alto Networks VM-Series since 2020, which is approximately six to seven years back.
What do I think about the stability of the solution?
Palo Alto Networks VM-Series is very stable.
What do I think about the scalability of the solution?
Scalability for Palo Alto Networks VM-Series is eight out of ten.
How are customer service and support?
Technical support for Palo Alto Networks VM-Series is provided through premium partner support. We are working with StarLink, and they are providing the best solution and best support. We have advanced partnership and advanced support for some of our customers. They are good with technical solutions.
Which solution did I use previously and why did I switch?
Palo Alto Networks VM-Series is better than Fortinet, mainly in its SP3 structure, flexibility, and reliability, and based on feedback from customers. Most of our customers have shifted from Fortinet to Palo Alto Networks VM-Series. Their feedback indicated concerns about slowness, subscription renewals, and other aspects they were not happy with.
Which other solutions did I evaluate?
Fortinet is the main competitor for Palo Alto Networks VM-Series on the market.
What other advice do I have?
Prices of Palo Alto Networks VM-Series are higher than other firewalls and other solutions. However, we are using its security features and proposing them, mostly winning tenders with this product. Palo Alto Networks VM-Series is a very best solution if you have subscription and extra support, and I would rate this solution seven to eight out of ten. I would give this review an overall rating of eight.
Bereket N.
Experience on palo alto vm Series Firewall
Reviewed on Nov 05, 2025
Review provided by G2
What do you like best about the product?
The most i like is its cost and it has more capable as the physical one and also as long as you purchase it you can get it no pending time west in manfacturing
What do you dislike about the product?
While enabling advanced features it has the most difficualt configurations by itself and also haively depends on the server capacity or resource is needed
What problems is the product solving and how is that benefiting you?
As i said previously you can save time of munfacturing, cost and also defending the network infrastructure with palo alto makes secure with tight security profiles
Oluwaseun A.
Seamless Deployment with Robust Security
Reviewed on Nov 04, 2025
Review provided by G2
What do you like best about the product?
I really appreciate the ease of configuration provided by the Palo Alto Networks VM-Series Virtual Firewall. The user interface and experience (UI/UX) make it very straightforward and intuitive for someone like me to configure and manage the firewall effectively. This seamless interface significantly aids in deploying the firewall into our infrastructure without much hassle. Additionally, the support from Palo Alto Networks during deployment was invaluable, allowing us to implement the firewall quickly and efficiently. The integration into our network was smooth, enhancing our productivity by enabling us to perform large configurations and then focus our efforts on other tasks. Overall, this firewall is incredibly efficient and productive, ensuring we're able to perform our security functions effectively as a team.
What do you dislike about the product?
I feel that the integration of more AI capabilities into the Palo Alto Networks VM-Series Virtual Firewall could significantly elevate its functionality. Although there are current functions that touch on this, a more comprehensive AI integration would enhance the ability to analyze incoming logs and automatically generate a visual representation of the network's status. This would be incredibly beneficial for quickly understanding what's happening within the network and for generating management and board reports without needing to manually interpret raw data or logs.
What problems is the product solving and how is that benefiting you?
I use Palo Alto Networks VM-Series Virtual Firewall for deep packet filtering, enhancing our security by blocking outside threats and analyzing traffic logs. It simplifies configuration and deployment, making our work more efficient and productive.