: VM-Series Models
Focus
Focus

VM-Series Models

Table of Contents

VM-Series Models

The VM-Series firewall is available in the following fixed vCPU models—VM-50, VM-100, VM-200, VM-300, VM-500, VM-700, and VM-1000-HV. These models are available for all supported PAN-OS versions, unless otherwise noted below. The software package ( .xva, .ova, or .vhdx file) that is used to deploy the VM-Series firewall is common across all models.
You can migrate your fixed model ELA or perpetual license to a
flexible license and retain the fixed model, or you can replace the license with a flexible vCPU license. See VM-Series Firewall Licensing to compare the licensing methods.
  • All models can be deployed as guest virtual machines on VMware ESXi and vCloud Air, KVM, Microsoft Hyper-V, Cisco ACI, Cisco ENCS, and Cisco CSP.
  • In public cloud environments—Amazon Web Services, Azure, Google Cloud Platform, Oracle Cloud Infrastructure, Alibaba Cloud—all models except the VM-50 are supported.
  • For VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported.
When you apply the capacity license on the VM-Series firewall, the model number and the associated capacities are implemented on the firewall. Capacity is defined in terms of the number of sessions, rules, security zones, address objects, IPSec VPN tunnels, and SSL VPN tunnels that the VM-Series firewall is optimized to handle. To make sure that you purchase the correct model for your network requirements, use the following table to understand the maximum capacity for each model and the capacity differences by model:
Model
Sessions
Security Rules
Dynamic IP Addresses
Security Zones
IPSec VPN Tunnels
SSL VPN Tunnels
VM-50
50,000
  • 250
  • 200 in Lite mode
1,000
15
  • 250
  • 25 in Lite mode
  • 250
  • 25 in Lite mode
VM-100
VM-200
250,000
1,500
2,500
40
1,000
500
VM-300
VM-1000-HV
800,000
10,000
100,000
40
2,000
2,000
VM-500
2,000,000
10,000
100,000
200
4,000
6,000
VM-700
10,000,000
20,000
100,000
200
8,000
12,000
For information on the platforms on which you can deploy the VM-Series firewall, see VM-Series Deployments. For more information about the VM-Series firewall models, see the Palo Alto Networks Firewall comparison tool. You can also review general information About the VM-Series Firewall.