Sold by: Palo Alto Networks
Free Trial
Protect AWS workloads, VDIs, and user traffic with AI/ML-powered virtual firewall from Palo Alto Networks. This listing includes VM-Series virtual firewall, Palo Alto Networks flagship - Advanced Threat Prevention security service and 24x7 premium technical support
Sold by: Palo Alto Networks
Overview
Video
Video 1
Video
Product video
This offering includes a free, 15-day trial. Go beyond base layer 3, 4 protection with industry leading firewall in the cloud-native form factor that seamlessly integrates and scales with your AWS environment.
02/01/24 UPDATE - This listing now includes Palo Alto Networks Advanced Threat Prevention cloud-delivered Security Service. ATP increases firewalls efficacy against zero day and other resilient threats (requires PAN-OS versions 10.2.8, 11.0.4, 11.1.2 or later).
Next-Gen Security - protect business critical data with VM-Series virtual firewalls that give you complete application layer-7 visibility and control of your traffic in your AWS environment.
Easy deployment - get started with a few clicks and deploy additional firewalls through the familiar EC2 instance creation flow.
Simplified policy management - means your policies adapt to changes in your AWS infrastructure while keeping your resources protected in a consistent manner without manual intervention by the FW admin.
Threat coverage - keep your workloads safe from threats with industry-leading traffic inspection.
This listing also includes Palo Alto Networks Advanced Threat Prevention service which safeguards your network from known and zero day threats, such as exploits, malware, spyware, and command and control attacks, with market-leading, researcher-grade signatures and ML inspection engine that do not compromise performance.
Looking for higher levels of security? Try the following PAYG listing to provide higher level of security to your AWS infrastructure:
VM-Series Next-Generation Virtual Firewall w/ Advanced Security Subs (PAYG). See link below:
Highlights
- Best-in-class public cloud network security solution powered by AI/ML and latest threat research protects your workloads against day zero and known threats with application layer 7 visibility
- Integrations with Gateway Load Balancer, AWS Auto Scaling, and Transit VPC with AWS Transit Gateway allow you to protect traffic across many types of dynamic and large scale deployments
- Policy definitions dynamically apply to your cloud assets based on AWS tags, Application IDs, User IDs, geographies or zones.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) HAQM Machine Image (AMI)
Latest version
Operating system
OtherLinux PAN-OS 10.1.14-h9
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 15 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c5n.xlarge Recommended | $1.08 |
m4.large | $0.90 |
c6a.2xlarge | $1.71 |
m5.large | $0.90 |
m6in.2xlarge | $1.71 |
c6a.4xlarge | $3.42 |
m6in.4xlarge | $3.42 |
m4.4xlarge | $3.42 |
m5.4xlarge | $3.42 |
m5n.large | $0.90 |
Vendor refund policy
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) HAQM Machine Image (AMI)
HAQM Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. HAQM EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
See documentation for detailed steps to set admin password before using the web interface of VM-Series. Once the instance is running, connect to it using a SSH client with the private key file used to launch the instance. For example: ssh -i <privatekey.pem> admin@<EIP or private IP of eth0> Then use the PAN-OS CLI commands "configure", "set mgt-config users admin password" and "commit" commands to set the password.
Resources
Support
Vendor support
To help you get started with your deployment such as how-to videos, deployment guides and reference architectures, please visit:
http://live.paloaltonetworks.com/aws
For post-sales support, you can use the following options: Call us at 1 (866) 898-9087 Open a case by following the steps here:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by HAQM Web Services.
Similar products
VM-Series Next-Gen Virtual Firewall w/ Advanced Security Subs (PAYG)
By Palo Alto Networks
Expand your coverage against command and control, web-based, file-based, DNS protocol, and other threats with industries most advanced cloud delivered security services that protect your AWS workloads, VDIs and user traffic with AI/ML-powered VM-Series virtual firewalls from Palo Alto Networks. This listing includes 24x7 Premium Support.
Cisco Catalyst 8000V SD-WAN & Router - PAYG - DNA Advantage
By Cisco Systems, Inc.
The DNA Advantage Package for Catalyst 8000V (C8000V) includes all DNA Advantage feature sets and delivers multi-gigabit performance for enterprise-class networking services & VPN in the AWS cloud, as well as twice the IPSec throughput with IMIX packets.
SAP HANA Connector for AWS Glue
By Trianz Digital Consulting, Inc.
Easily connect to SAP HANA from AWS Glue
CloudGuard Network Security Next-Gen Firewall with Threat Prevention
By Check Point Software Technologies
Advanced threat prevention security for AWS and hybrid cloud environments with GWLB (starting with R81.20)
Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Customer reviews
Pedro O.
Using Palo alto Firewall
Reviewed on Apr 10, 2025
Review provided by G2
What do you like best about the product?
The ability to deploy on AWS, Azure, and GCP with consistent security policies across hybrid environments is a game-changer. Additionally, the SSL decryption feature ensures no threats hide in encrypted traffic
What do you dislike about the product?
The VM-Series’ dynamic address groups and User-ID features streamline policy enforcement based on real-time user/device context. The Threat Prevention subscription (with WildFire) provides AI-driven malware analysis
What problems is the product solving and how is that benefiting you?
Shadow IT Risks: Layer 7 visibility identifies unauthorized SaaS apps (e.g., employees using unapproved cloud storage), reducing data exfiltration risks by 60%.
Cloud Security Gaps: Auto-scaling in AWS prevents bottlenecks during traffic spikes while maintaining threat inspection.
Cloud Security Gaps: Auto-scaling in AWS prevents bottlenecks during traffic spikes while maintaining threat inspection.
Leave a comment0 comments
Computer & Network Security
very easy to spin up, manage, and deploy using terraform, manage using ansible
Reviewed on Apr 08, 2025
Review provided by G2
What do you like best about the product?
was able to deploy using terraform, and provision all the firewall rules using ansible, easy to control via code. was able to test deploying in AWS and azure with no problems.
What do you dislike about the product?
not much, great product overall. i will say i wish getting the product deployed was a little faster, not nessicarly the most emphermial product, but besides that great
What problems is the product solving and how is that benefiting you?
limiting access to backend application, acting as network gatweay and firewall for my backend appication. used it as middlewear in between azure devops and my private application.
Hospital & Health Care
Great experience using Palo Alto VM series devices
Reviewed on Apr 04, 2025
Review provided by G2
What do you like best about the product?
Ease of use and implementation of the VM devices. VM series offer a great experience whether deploying in the cloud or on-premises. Palo Alto support is very responsive, also the support portal is very easy to navigate.
What do you dislike about the product?
There is not much to dislike about Palo Alto VM series devices, one thing might be the way they are licenced. You need to purchase Flex credits and depending on the features you use it how many credits your VM consumes.
What problems is the product solving and how is that benefiting you?
Enabling our organization and our users to establish secure connection to external applications and services. Also provides resiliency and stability to our network.
Isaac M.
Highly Secure and Efficient
Reviewed on Mar 25, 2025
Review provided by G2
What do you like best about the product?
This upe'd our security 10x. I loved the ease in managing and configuring the firewall. Loved how easy the GUI was to navigate and how intuitive it was.
What do you dislike about the product?
Sometimes logs were hard to find and pin point because there was not enough info. There was also some syncing issues between Okta and Palo Alto when we setup Scep certs for WIFI.
What problems is the product solving and how is that benefiting you?
It saving our IT team a lot of time by allowing us to automate security threats and send us notifications when we need to be aware of high level issues.
Andrew C.
Good experience with Palo Alto Networks VM-Series Virtual Firewall
Reviewed on Mar 24, 2025
Review provided by G2
What do you like best about the product?
I love the consistency of the firewall, it generally works well. It works well enough that most of the time I don't realize that it's doing anything at all.
What do you dislike about the product?
I enjoy Palo Alto Networks VM-Series Virtual Firewall, however there are times when there are outages with it that are quite inconvenient at times. Generally I don't have issues.
What problems is the product solving and how is that benefiting you?
It solves the issue of preventing bad actors from accessing the same network that I use on a daily basis at my place of business. It also solves the problem of creating an in-house firewall.