VM-Series Deployment Guide
    : VM-Series Models
    Focus
    Download PDF
    Focus
    1. Home
    2. VM-Series
    3. VM-Series Deployment Guide
    4. License the VM-Series Firewall
    5. VM-Series Models
    Download PDF

    VM-Series Deployment Guide

    VM-Series Models

    Table of Contents
    End-of-Life (EoL)

    VM-Series Models

    Learn about fixed vCPU model sizes and capacity.
    The VM-Series firewall is available in the following fixed vCPU models—VM-50, VM-100, VM-200, VM-300, VM-500, VM-700, and VM-1000-HV. These models are available for all supported PAN-OS versions, unless otherwise noted below. The software package (.xva, .ova, or .vhdx file) that is used to deploy the VM-Series firewall is common across all models.
    You can migrate your fixed model ELA or perpetual license to a
    flexible license and retain the fixed model, or you can replace the license with a flexible vCPU license. See VM-Series Firewall Licensing to compare the licensing methods.
    All models can be deployed as guest virtual machines on VMware ESXi and vCloud Air, KVM, Microsoft Hyper-V, Cisco ACI, Cisco ENCS, and Cisco CSP. In the public cloud environments—Amazon Web Services, Azure, Google Cloud Platform, Oracle Cloud Infrastructure, Alibaba Cloud—all models except the VM-50 are supported; on VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported. The software package (.xva, .ova, or .vhdx file) that is used to deploy the VM-Series firewall is common across all models.
    When you apply the capacity license on the VM-Series firewall, the model number and the associated capacities are implemented on the firewall. Capacity is defined in terms of the number of sessions, rules, security zones, address objects, IPSec VPN tunnels, and SSL VPN tunnels that the VM-Series firewall is optimized to handle. To make sure that you purchase the correct model for your network requirements, use the following table to understand the maximum capacity for each model and the capacity differences by model:
    Model
    Sessions
    Security Rules
    Dynamic IP Addresses
    Security Zones
    IPSec VPN Tunnels
    SSL VPN Tunnels
    VM-50
    50,000
    • 250
    • 200 in Lite mode
    1,000
    15
    • 250
    • 25 in Lite mode
    • 250
    • 25 in Lite mode
    VM-100
    VM-200
    250,000
    1,500
    2,500
    40
    1,000
    500
    VM-300
    VM-1000-HV
    800,000
    10,000
    100,000
    40
    2,000
    2,000
    VM-500
    2,000,000
    10,000
    100,000
    200
    4,000
    6,000
    VM-700
    10,000,000
    20,000
    100,000
    200
    8,000
    12,000
    For information on the platforms on which you can deploy the VM-Series firewall, see VM-Series Deployments. For more information about the VM-Series firewall models, see the Palo Alto Networks Firewall comparison tool. You can also review general information About the VM-Series Firewall.

    © 2024 Palo Alto Networks, Inc. All rights reserved.