VM-Series Models
| Where Can I Use This? | What Do I Need? |
|---|
|
|
- VM-Series 10.x or above
- Panorama running PAN-OS 10.1.x or above versions
- Customer Support Portal (CSP) account with one of the following
user roles:
- Super User, Standard User, Limited User, Threat
Researcher, AutoFocus Trial Role, Group Super User,
Group Standard User, Group Limited User, Group Threat
Researcher, Authorized Support Center (ASC) User, and
ASC Full Service User.
- Superuser access to the VM-Series firewall
|
The VM-Series firewall is available in the following
fixed vCPU models—VM-50, VM-100, VM-200, VM-300, VM-500, VM-700,
and VM-1000-HV. These models are available for all supported PAN-OS
versions, unless otherwise noted below. The software package (
.xva,
.ova,
or
.vhdx file) that is used to deploy the VM-Series
firewall is common across all models.
You can migrate your fixed model ELA or perpetual license to a
flexible license and retain the fixed
model, or you can replace the license with a flexible vCPU license. See
VM-Series Firewall Licensing
to compare the licensing methods.
All models can be deployed as guest virtual machines
on VMware ESXi and vCloud Air, KVM, Microsoft Hyper-V, Cisco ACI,
Cisco ENCS, and Cisco CSP.
- In public cloud environments—Amazon Web Services, Azure, Google
Cloud Platform, Oracle Cloud Infrastructure, Alibaba Cloud—all models
except the VM-50 are supported.
- For VMware NSX, only the VM-100, VM-300, VM-500, and VM-700 firewalls are supported.
When you apply the capacity
license on
the VM-Series firewall, the model number and the associated capacities
are implemented on the firewall. Capacity is defined in terms of
the number of sessions, rules, security zones, address objects,
IPSec VPN tunnels, and SSL VPN tunnels that the VM-Series firewall
is optimized to handle. To make sure that you purchase the correct
model for your network requirements, use the following table to
understand the maximum capacity for each model and the capacity
differences by model:
Model | Sessions | Security Rules | Dynamic IP Addresses | Security Zones | IPSec VPN Tunnels | SSL VPN Tunnels |
|
VM-100 VM-200 | 250,000 | 1,500 | 2,500 | 40 | 1,000 | 500 |
VM-300 VM-1000-HV | 400,000 | 10,000 | 100,000 | 40 | 2,000 | 2,000 |
VM-500 | 2,000,000 | 10,000 | 100,000 | 200 | 4,000 | 6,000 |
VM-700 | 10,000,000 | 20,000 | 100,000 | 200 | 8,000 | 12,000 |
For information on the platforms on which you can deploy the VM-Series firewall, see
About the VM-Series Firewall. For more
information about the VM-Series firewall models, see the Palo Alto Networks Firewall
comparison tool.
