Switch Between the BYOL and the PAYG Licenses
The VM-Series firewall cannot be converted between the BYOL and PAYG licensing options. If you have already deployed and configured a VM-Series firewall with the PAYG or BYOL option in AWS, Azure, or Google Cloud Platform, and now want to switch to the other option, use the following instructions to save and export the configuration on your existing firewall, deploy a new firewall, and then restore the configuration on the new firewall.
- Save a backup of the current configuration file and store it to an external server.
- SelectandDeviceSetupOperationsExport named configuration snapshot.
- Select the XML file that contains your running configuration (for example, running-config.xml) and clickOKto export the configuration file.
- Save the exported file to a location external to the firewall.
- Deploy a new firewall and register or activate the license, as appropriate.For a new PAYG instance:
For a new BYOL instance:
- In the AWS, Azure, or Google Cloud Platform Marketplace, select the software image for the PAYG licensing bundle you want to deploy.
- Deploy a new VM-Series firewall in the AWS, Azure, or Google public cloud. See Set Up the VM-Series Firewall on AWS, Set up the VM-Series Firewall on Azure, or Set Up the VM-Series Firewall on Google Cloud Platform.
- Contact your sales representative or reseller to purchase a BYOL license, and get a BYOL auth code that you can use to license your firewall.
- Deploy a new VM-Series firewall in the AWS or Azure public cloud. See Set Up the VM-Series Firewall on AWS, Set up the VM-Series Firewall on Azure or Set Up the VM-Series Firewall on Google Cloud Platform.
- On the newly deployed firewall, restore the configuration that you exported.
- Access the web interface of the newly deployed firewall.
- Select, clickDeviceSetupOperationsImport named configuration snapshot, Browse to the configuration file on the external host, and clickOK.
- ClickLoad named configuration snapshot, select theNameof the configuration file you just imported, and clickOK.
- ClickCommitto overwrite the running configuration with the snapshot you just imported.
- Verify that the configuration on the new firewall matches the firewall that you are replacing, before you delete the firewall or deactivate the licenses on the replaced firewall.
VM-Series Firewall Licenses for Public Clouds
VM-Series Firewall Licenses for Public Clouds The VM-Series firewall licensing strategy is the same for AWS, Azure, and Google Cloud Platform. There are different license ...
About the VM-Series Firewall on Google Cloud Platform
Prepare to deploy a VM-Series firewall on a Google® Compute Engine instance. ...
About the VM-Series Firewall on Azure
About the VM-Series Firewall on Azure The VM-Series firewall on Azure must be deployed in a virtual network (VNet) using the Resource Manager deployment mode. ...
Bootstrap the VM-Series Firewall
Bootstrap the VM-Series Firewall Bootstrapping allows you to create a repeatable and streamlined process of deploying new VM-Series firewalls on your network because it allows ...
Activate the License
Activate the License To activate the license on your VM-Series firewall, you must have deployed the VM-Series firewall and completed initial configuration. To deploy the ...
Virtualization Features VM-50 Lite Integration with Azure Security Center View high-priority firewall logs as security alerts on the Azure Security Center dashboard with the default ...
Deploy the VM-Series Firewall on Azure Stack
Azure Stack is Microsoft’s Azure cloud within your own datacenter. Deploy the firewall to secure your workloads in your Azure Stack (on-premise) implementation and shift ...
Set up the VM-Series Firewall on Azure
Set Up the VM-Series Firewall on Azure VM-Series firewall on Azure brings the security features of Palo Alto Networks next generation firewall as a virtual ...
VM-Series Deployments The VM-Series firewall can be deployed on the following platforms: VM-Series for VMware vSphere Hypervisor (ESXi) and vCloud Air You can deploy any ...