End-of-Life (EoL)
A support account and a valid VM-Series license are required to obtain the .xva base image file that is required to install the VM-Series firewall on the SDX server. If you have not already registered the capacity auth-code that you received with the order fulfillment email, with your support account, see Register the VM-Series Firewall. After registration is completed, continue to the following tasks:
Upload the Image to the SDX Server
To provision the VM-Series firewall, you need to obtain the .xva image file and upload it to the SDX server.
Upload the XVA Image to the SDX Server
Download and extract the base image zip file to a local computer. Go to https://support.paloaltonetworks.com/ and download the VM-Series Citrix SDX Base Image zip file. Unzip the base image zip file, and extract the .xva file. This .xva file is required for installing the VM-Series firewall.
Upload the image from the local computer onto the Citrix SDX server. Launch the web browser and log in to the SDX server. Select Configuration > Palo Alto VM-Series > Software Images. In the Action drop-down, select Upload... and Browse to the location of the saved .xva image file. Select the image and click Open. Upload the image to the SDX server.
Provision the VM-Series Firewall on the SDX Server
Provision the VM-Series Firewall on the SDX Server
Access the SDX server. Launch the web browser and connect to the SDX server.
Create the VM-Series firewall. Allocate the total number of data interfaces that you might require on the VM-Series firewall during initial deployment. Adding or removing interfaces to the VM-Series firewall after initial deployment will cause the data interfaces (Eth 1/1 and Eth 1/2) on the VM-Series firewall to re-map to the adapters on the SDX server. Each data interface sequentially maps to the adapter with the lowest numerical value, and can therefore cause a configuration mismatch on the firewall. Select Configuration > Palo Alto VM-Series > Instances. Click Add. Enter a name for the VM-Series firewall. Select the .xva image that you uploaded earlier. This image is required to provision the firewall. Allocate the memory, additional disk space, and the virtual CPUs for the VM-Series firewall. To verify resource allocation recommendations, see Requirements. Select the network interfaces: Use the management interfaces 0/1 or 0/2 and assign an IP address, netmask, and gateway IP address. If needed, you can use a data interface on the SDX server for managing the firewall. Select the data interfaces that will be used for handling traffic to and from the firewall. If you plan to deploy the interfaces as Layer 2 or virtual wire interfaces, select the Allow L2 Mode option so that the firewall can receive and forward packets for MAC addresses other than its own MAC address.
Review the summary and click Finish to begin the installation process. It takes 5-8 minutes to provision the firewall. When completed, use the management IP address to launch the web interface of the firewall.
Continue with Activate the License.

Recommended For You