Software NGFW Credits

Learn about Software NGFW credits, and the licenses they fund.
Software NGFW credits can be used to fund Software NGFWs (VM-Series and CN-Series), Cloud-Delivered Security Services (CDSS), and virtual Panorama appliances.
If you deactivate a firewall or a security service, the credits allocated to that resource are returned to your credit pool and are available for use during the term for which the credits were purchased.
You create a deployment profile to configure one or more firewalls based on PAN-OS version:
  • VM-Series firewalls on PAN-OS version 10.0.3 and earlier—Compatible with legacy licenses based on VM-Series Models and security service bundles.
  • VM-Series firewalls on PAN-OS version 10.0.4 and later—Flexible number of vCPUs from 1-32, and flexible selection of security services. You modify the deployment profile to add or decrease the number of vCPUs or add new services as they become available.
Software NGFW credits are term-based. Terms can be defined for any amount of time between 1 and 5 years. Both allocated and unallocated credits expire at the end of the agreed upon term. If you stop using a firewall, a security service, or Panorama deployment, the credits that were allocated to that resource are refunded to the credit pool and can be reallocated to a new resource.
Use the table below to ensure that you allocate the necessary hardware resources for your chosen number of vCPUs.
Memory
Profile
Supported Hypervisors
Minimum Hard Drive
4.5GB, 5.5GB
ESXi, Hyper-V, KVM
32GB (60GB at boot)
6.5GB
AWS, Azure, ESXi, Google Cloud Platform, Hyper-V, KVM, OCI, Alibaba Cloud, Cisco ACI, Cisco CSP, Cisco ENCS, NSX-T
60GB
9GB
AWS, Azure, ESXi, Google Cloud Platform, Hyper-V, KVM, OCI, Alibaba Cloud, Cisco ACI, Cisco CSP, Cisco ENCS, NSX-T
60GB
16GB
AWS, Azure, ESXi, Google Cloud Platform, Hyper-V, KVM, OCI, Alibaba Cloud, Cisco ACI, Cisco CSP, NSX-T
60GB
56GB
AWS, Azure, ESXi, Google Cloud Platform, Hyper-V, KVM, OCI, Alibaba Cloud, Cisco ACI, Cisco CSP, NSX-T
60GB
For all memory profiles listed above, the minimum vCPUs is 2. You can enable Lite mode if you choose 4.5GB. Lite mode is an alternative operating mode for environments where resources are limited. See Lite Mode for more information.
Lite mode requires minimum 32GB of hard drive space. However, because the VM-Series base image is common for all vCPU combinations, you must allocate 60GB of hard drive space until you license a VM-Series firewall with 4.5GB memory.
To achieve the best performance, all of the needed cores should be available on a single CPU socket.
The number of vCPUs assigned to the management plane and those assigned to the dataplane differs depending on the total number of vCPUs assigned to the VM-Series firewall. Refer to the following tables (1-16 vCPUs and 17-32 vCPUs) to find out the number of data plane vCPUs allocated for a given combination of memory profile and total vCPUs. For example, with a memory profile of 16GB and a total of 15 vCPUs 11 are assigned to the dataplane and the remaining 4 are assigned to the management plane.
Memory Profile
Total vCPUs on Dataplane (1-16)
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
4.5GB
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
5.5GB
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
6.5GB
1
2
2
2
2
2
2
2
2
2
2
2
2
2
2
9GB
1
2
3
3
4
4
4
4
4
4
4
4
4
4
4
16GB
1
2
3
3
4
5
6
6
7
8
9
9
10
11
12
56GB
1
2
3
3
4
5
6
6
7
8
9
9
10
11
12
Memory Profile
Total vCPUs on Dataplane (17-32)
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
4.5GB
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
5.5GB
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
6.5GB
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
9GB
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
4
16GB
12
12
12
12
12
12
12
12
12
12
12
12
12
12
12
12
56GB
12
13
14
15
15
16
17
18
18
19
20
21
21
22
23
24
The following table shows the firewall capacity for each memory profile. Unlike VM-series models, Software NGFW Credits from PAN-OS 10.0.4 onwards allow you to choose the memory profile that best fits your environment without consuming any additional credits.
Memory Profiles
Sessions
Security Rules
Dynamic IP Addresses
Security Zones
IPSec VPN Tunnels
SSL VPN Tunnels
4.5 GB
50,000
200 in Lite mode
1,000
15
25 in Lite mode
25 in Lite mode
5.5 GB
50,000
250
1,000
15
250
250
6.5 GB
250,000
1,500
2,500
40
1,000
500
9 GB
800,000
10,000
100,000
40
2,000
2,000
16 GB
2,000,000
10,000
100,000
200
4,000
6,000
56 GB
10,000,000
20,000
100,000
200
8,000
12,000

Recommended For You