VM-Series Models

The VM-Series firewall is available in the following models—VM-50, VM-100, VM-200, VM-300, VM-500, VM-700 and VM-1000-HV.
All models can be deployed as guest virtual machines on VMware ESXi and vCloud Air, Citrix NetScaler SDX, KVM and KVM in OpenStack, and Microsoft Hyper-V. In the public cloud environments—Amazon Web Services, Azure—all models except the VM-50 are supported; on VMware NSX, only the VM-100, VM-200, VM-300, VM-500, and VM-1000-HV firewalls are supported. The software package (.xva, .ova, or .vhdx file) that is used to deploy the VM-Series firewall is common across all models. For information, see VM-Series Deployments.
When you apply the capacity license on the VM-Series firewall, the model number and the associated capacities are implemented on the firewall. Capacity is defined in terms of the number of sessions, rules, security zones, address objects, IPSec VPN tunnels, and SSL VPN tunnels that the VM-Series firewall is optimized to handle. To make sure that you purchase the correct model for your network requirements, use the following table to understand the maximum capacity for each model and the capacity differences by model:
Model
Sessions
Security Rules
Dynamic IP Addresses
Security Zones
IPSec VPN Tunnels
SSL VPN Tunnels
VM-50
50,000
250
1,000
15
250
250
VM-100
VM-200
250,000
1,500
2,500
40
1,000
500
VM-300
VM-1000-HV
800,000
10,000
100,000
40
2,000
2,000
VM-500
2,000,000
10,000
100,000
200
4,000
6,000
VM-700
10,000,000
20,000
100,000
200
8,000
12,000
To compare the different VM-Series firewall models, see the Palo Alto Networks Firewall comparison tool. You can also review general information About the VM-Series Firewall.

Related Documentation