VM-Series Deployment Guide
  • VM-Series Deployment Guide
  • All VM-Series Documentation
  • All Documentation
VM-Series Deployment Guide
: Create a Deployment Profile
Focus
Download PDF
Focus
  1. Home
  2. VM-Series
  3. VM-Series Deployment Guide
  4. License the VM-Series Firewall
  5. Software NGFW Credits
  6. Create a Deployment Profile
Download PDF

VM-Series Deployment Guide

Create a Deployment Profile

Table of Contents

Create a Deployment Profile

Use the CSP to create a Software NGFW deployment profile for PAN-OS 10.0.3 and earlier, or PAN-OS 10.0.4 or later.
Strata Cloud Manager supports two licensing tiers—Strata Cloud Manager Essentials (included with NGFW at no additional cost), and Strata Cloud Manager Pro (available as an upgrade). These licenses unlock a range of network security features and management tools to optimize NGFW operations.
Palo Alto Networks has announced May 8, 2025, as the End-of-Sale date for the Strata Cloud Manager on VM Flex licenses. Starting in March 2025, Palo Alto Networks will automatically migrate customers using these licenses to alternate licenses at no extra cost. The updated licenses will retain the same expiration dates and terms as the original licenses.
To create a deployment profile, you must have a Customer Support Portal account (CSP) and access to an activated credit pool.
Before you begin, estimate the number of firewalls that will use the configuration in the deployment profile. You don't have to deploy all the firewalls at once.
  1. If you already have a credit pool, log into the account, and from the dashboard, select ProductsSoftware NGFW CreditsCreate Deployment Profile.
    If you have activated a credit pool, the Create Deployment Profile form appears.
    1. Select the VM-Series firewall type and click Next.
    2. Select the PAN-OS version.
      Fixed models are legacy models and Palo Alto Networks recommends using Flexible vCPUs.
    3. Click Next.
  2. Create the VM-Series profile.
    1. Profile Name.
      Name the profile.
    2. Number of Firewalls.
      Enter the number of firewalls this profile deploys, assuming you have sufficient credits. Credits are only deducted when a firewall is deployed.
    3. PAN-OS 11.1.3 and later releasesNumber of vSYS
      Enter the number of virtual systems support that you require on your VM-Series firewall.
      Use a flexible VM-Series firewall license and Tier 3 or Tier 4 instances supporting a minimum of 16 vCPUs or more.
      • VM-Series in Tier 3 instance supports a maximum of 25 virtual systems.
      • VM-Series in Tier 4 instance, supports a maximum of 100 virtual systems.
      For information on the maximum number for a particular object or resource that a single VM-Series firewall deployment can create, store, manage, or interact with based on allocated memory or tier, see Maximum Limits Based on Tier and Memory.
    4. Firewall Model:
      Choose a VM-Series model.
      Planned vCPU/Firewall (PAN-OS 10.0.4 or above).
      Enter the number of vCPUs per firewall.
      Security Use Case: Choose a use case.
    5. Customize Subscriptions.
      After selecting a use case, you can add or remove security services.
    6. Select your Strata Cloud Manager subscription—Strata Cloud Manager Pro or Strata Logging Service. If you're using Strata Cloud Manager Essentials, do not select these options.
      Strata Cloud Manager offers multiple subscription tiers. Strata Cloud Manager Pro includes AIOps, Autonomous Digital Experience Management (ADEM), Strata Logging Service (SLS), and Cloud Configuration Management. Strata Logging Service (SLS) provides logging services only. Select Strata Cloud Manager Pro to access both Strata Cloud Manager and SLS, as it comes bundled with SLS.
      If you don’t select a cloud subscription in the deployment profile, SCM Essentials activates automatically. When associating multiple deployment profiles with a TSG, ensure none of them have a cloud subscription.
    7. (optional) Hover over the question mark to view subscription details:
      • Strata Cloud Manager Pro includes AIOps, ADEM, Strata Logging Service, and Cloud Configuration Management.
      • Strata Logging Service provides logging services only.
  3. (optional) Hover over the question mark following Protect more, save more to see how your credit allocation affects savings.
  4. Click Calculate Estimated Cost to view the credit total, and the number of credits available before the deployment.
    (optional) Hover over the question mark following the estimate to view the credit breakdown for each component.
  5. Create the Deployment Profile.
    You might have to wait several seconds for the profile to appear in the Current Deployment Profiles tab list. Before the allocation is complete, the Credits Consumed or Allocated column shows 0 and Update Pending. Scroll to the bottom and go to the last page to find your profile.
    To view your deployment profile later on, click the Details button on the parent credit pool and select Current Deployment Profiles.
    • Note the auth code for your profile on the far right; Software NGFW credit auth codes start with D.
    • The Credits Consumed or Allocated column shows 0 and Update Pending before the allocation is complete.
    • The Audit Trail tab shows Credit Transactions and the Deployment Profiles you manage. You can also search for a profile by time in this tab.
      Use search to locate your profile, and expand the row to view the configuration you specified when you created the profile.

Technical Documentation

Company

Legal Notices

© 2025 Palo Alto Networks, Inc. All rights reserved.