Whether you are deploying a VM-Series firewall (on-demand deployment) or a hardware-based Palo Alto Networks next-generation firewall (mass rollout to remote sites), the bootstrapping process provides an agile, consistent, and scalable process for setting up a firewall with or without Internet access. PAN-OS support bootstrapping capability on all hardware-based firewalls and on VM-Series firewalls in the private cloud (ESXi, KVM, and Hyper-V) and public cloud (AWS and Azure). Additionally, starting with PAN-OS 7.1.4, PAN-OS supports bootstrapping in KVM in OpenStack.