End-of-Life (EoL)
Use these instructions to deploy the VM-Series firewall on Hyper-V using Hyper-V Manager.
Install the VM-Series Firewall on Hyper-V
Download the VHDX file. Register your VM-Series firewall and obtain the VHDX file. Go to https://www.paloaltonetworks.com/support. Filter by PAN-OS for VM-Series Base Images and download the VHDX file. For example, PA-VM-HPV-7.1.0.vhdx .
Set up any vSwitch(es) that you will need. To create a vSwitch: From Hyper-V Manager, select the host and select Action > Virtual Switch Manager to open the Virtual Switch Manager window. Under Create virtual switch, select the type of vSwitch (external, internal, or private) to create and click Create Virtual Switch.
Install the firewall. On the Hyper-V Manager, select the host and select Action > New > Virtual Machine. Configure the following settings in the New Virtual Machine Wizard: Choose a Name and Location for the VM-Series firewall. The VM-Series firewall stores the VHDX file at the specified location. Choose Generation 1. This is the default option and the only version supported. For Startup Memory, assign 4096MB; if you plan to install the VM-1000-HV license, assign 5120MB. Do not enable dynamic memory; the VM-Series firewall requires static memory allocation. Configure Networking. Select an external vSwitch to connect the management interface on the firewall. To connect the Virtual Hard Disk, select Use an existing virtual hard disk and browse to the VHDX file you downloaded earlier. Review the summary and click Finish. Assign virtual CPUs to the firewall. Select the VM you created and navigate to Action > Settings. Select Processor and enter 2, 4, or 8 vCPUs. The management plane uses only one vCPU; any additional vCPUs are assigned to the dataplane. Click OK.
Connect at least one network adapter for the dataplane interface on the firewall. Select Settings > Hardware > Add Hardware and select the Hardware type for your network adapter. Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode. Click OK.
(Optional) Enable MAC address spoofing on Hyper-V if you are not using Layer 3 with hypervisor assigned MAC address. Double click the dataplane virtual network adapter and click Advanced Settings. Click the Enable MAC address spoofing check box and click Apply.
Power on the firewall. Select the firewall from the list of Virtual Machines and navigate to Action > Start to power on the firewall.

Recommended For You