Filter

Expand All | Collapse All

VM-Series Firewall Docs

Activation & Onboarding
Getting Started
Upgrade
Deployment
Select a Document
- Public Cloud
- Private Cloud

Focus

VM-Series

Components of the VM-Series Firewall on NSX-T (North-South)

Table of Contents

VM-Series Firewall on VMware NSX-T

Install the Panorama Plugin for VMware NSX

Components of the VM-Series Firewall on NSX-T (North-South)

This section describes the key components of VM-Series on NSX-T.

Where Can I Use This?	What Do I Need?
VMware NSX	VM-Series Firewall License (BYOL) Panorama VM-Series plugin Panorama plugin for NSX

The following tables show the components of this joint Palo Alto Networks and VMware NSX-T solution.

VMware Components
vCenter/ESXi	The vCenter server is the centralized management tool for the vSphere suite. ESXi is a hypervisor that enables compute virtualization. Refer to VMware’s Compatibility Matrix for vCenter compatibility with your version of NSX-T.
NSX-T Manager	VMware NSX-T data center 2.4.0 and later must be installed and registered with the vCenter server. The NSX-T Manager is required to deploy the VM-Series firewall on the ESXi hosts within a ESXi cluster. The deployment procedure described in this document refers to NSX-T Manager 3.0 and later.

Palo Alto Networks Components
PAN-OS	The VM-Series base image (PA-VM-NST-9.1.zip) is required for deploying the VM-Series firewall on NSX-T. The minimum system requirement for deploying the VM-Series firewall for NSX on the ESXi server depends on your VM-Series model. See VM-Series System Requirements for the minimum hardware requirements for your VM-Series model.
Panorama Panorama must be running the same release version or later version that the firewalls that it will manage.	The VM-Series firewall on NSX-T requires Panorama 9.1 or later. Panorama is the centralized management tool for the Palo Alto Networks Next-Generation Firewalls. In this solution, Panorama works with the NSX-T Manager to deploy, license, and centrally administer—configuration and policies—the VM-Series firewall for NSX-T. Panorama must be able to connect to the NSX-T Manager, the VM-Series firewalls, and the Palo Alto Networks update server. See the Panorama Administrator’s Guide for information about deploying your Panorama appliance.
Panorama plugin for VMware NSX	3.0.0 or later
VM-Series Plugin	1.0.6 or later
VM-Series Firewall	Software NGFW Credits: up to 64 vCPUs Models: VM-100, VM-300, VM-500, and VM-700

VM-Series Firewall on VMware NSX-T

Install the Panorama Plugin for VMware NSX