Install the VM-Series Firewall on KVM
Focus
Focus
VM-Series

Install the VM-Series Firewall on KVM

Table of Contents

Install the VM-Series Firewall on KVM

Learn how to install the VM-Series firewall in your KVM network.
Where Can I Use This?What Do I Need?
  • KVM
  • VM-Series Firewall License (BYOL)
  • Panorama
  • VM-Series plugin
The libvirt API that is used to manage KVM includes a host of tools that allow you to create and manage virtual machines. To install the VM-Series firewall on KVM you can use any of the following methods.
  • virt-manager—Deploy the VM-Series using the virt-manager virtual machine manager. Virt-manager provides a convenient wizard to help you through the installation process.
  • virsh—Deploy the VM-Series using the KVM command line. Create an XML file that defines the virtual machine instance and bootstrap XML file that defines the initial configuration settings of the firewall. Then install the firewall by mounting an ISO image as a CD-ROM.
  • virt-install—Another option to deploy the VM-Series firewall using the KVM command line. Use this option to create the definition for the VM-Series firewall and install it.
This document provides steps for installing the VM-Series firewall on KVM using virt-manager and virsh.

Prepare to Deploy the VM-Series Firewall

  • Purchase the VM-Series model and register the authorization code on the Palo Alto Networks Customer Support web site. See Create a support account and Register the VM-Series Firewall.
  • Obtain the qcow2 image and save it on the Linux server. As a best practice, copy the image to the folder: /var/lib/libvirt/qemu/images.
    If you plan to deploy more than one instance of the VM-Series firewall, make the required number of copies of the image. Because each instance of the VM-Series firewall maintains a link with the .qcow2 image that was used to deploy the firewall, to prevent any data corruption issues ensure that each image is independent and is used by a single instance of the firewall.