Learn how creating a custom Amazon Machine Image (AMI)
can speed your deployment process.
A custom VM-Series AMI gives you the consistency
and flexibility to deploy a VM-Series firewall with the PAN-OS version
you want to use on your network instead of being restricted to using
only an AMI that is published to the AWS public Marketplace or to
the AWS GovCloud Marketplace. Using a custom AMI speeds up the process
of deploying a firewall with the PAN-OS version of your choice because
it reduces the time to provision the firewall with an AMI published
on the AWS public or AWS GovCloud marketplace, and then perform
software upgrades to get to the PAN-OS version you want to use on
your network. Additionally, you can use the custom AMI in the Auto
Scaling VM-Series Firewalls CloudFormation Templates or any other
templates that you have created.
You can create a custom AMI
with the BYOL, Bundle 1, or Bundle 2 licenses. The process of creating
a custom AMI requires you to remove all configuration from the firewall
and perform a private data reset, so in this workflow you’ll launch
a new instance of the firewall from the AWS Marketplace instead
of using an existing firewall that you have fully configured.
creating a custom AMI with a BYOL version of the firewall, you must
first activate the license on the firewall so that you can access
and download PAN-OS content and software updates to upgrade your
firewall, and then deactivate the license on the firewall before
performing the private data reset and creating the custom AMI. If
you do not deactivate the license, you lose the license that you
applied on this firewall instance.
Launch the VM-Series firewall from the Marketplace.