Saucepan

User Tools

Site Tools

Trace: • products • sku • soc • decoders • licencing • licensing_vm • training • architecture • dns_security
paloaltonetworks:licensing_vm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
paloaltonetworks:licensing_vm [2021/11/18 12:26] – created bstaffordpaloaltonetworks:licensing_vm [2022/11/23 12:49] (current) – external edit 127.0.0.1
Line 3: Line 3:
 ===== Cloning ===== ===== Cloning =====
 When cloning a lab VM firewall to use on another machine, edit the VMware VMX config file to use ''uuid.action = "keep"''. When you boot the VM, click "I moved it". When cloning a lab VM firewall to use on another machine, edit the VMware VMX config file to use ''uuid.action = "keep"''. When you boot the VM, click "I moved it".
 +
 +===== VM Credit SKU =====
 +  * PAN-SOFTWARE-NGFW-CR
 +  * PAN-SOFTWARE-NGFW-LAB 
 +  * PAN-SOFTWARE-NGFW-NFR 
  
 ===== VM Flex Licencing ===== ===== VM Flex Licencing =====
 +
 +Data gathered Nov 2021.
 +
 [[https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/license-the-vm-series-firewall/software-ngfw/migrate-to-a-flexible-vm-series-license.html|Useful Page on VM-FLEX migration]]. [[https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/license-the-vm-series-firewall/software-ngfw/migrate-to-a-flexible-vm-series-license.html|Useful Page on VM-FLEX migration]].
  
Line 13: Line 21:
 When you "Upgrade capacity", to change a VM-100 to a VM-FLEX-2, the firewall rebooted and was automatically moved from one FLEX profile (VM-100) to the other (FLEX) in the support portal. When you "Upgrade capacity", to change a VM-100 to a VM-FLEX-2, the firewall rebooted and was automatically moved from one FLEX profile (VM-100) to the other (FLEX) in the support portal.
  
 +I also had a PAN-OS 10.1.3 VM that I licensed directly as VM-100.
  
 The VM Capacity Tier is based on RAM. From PAN-OS 10.0.4, CPU will control throughput while RAM controls limits like sessions, addres objects, etc. [[https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/license-the-vm-series-firewall/software-ngfw/maximum-limits-based-on-memory.html|See here]]. The VM Capacity Tier is based on RAM. From PAN-OS 10.0.4, CPU will control throughput while RAM controls limits like sessions, addres objects, etc. [[https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/license-the-vm-series-firewall/software-ngfw/maximum-limits-based-on-memory.html|See here]].
Line 108: Line 117:
 ===== Trial VM ===== ===== Trial VM =====
 A trial VM will not produce traffic/threat logs but it will pass traffic (with a limited number of concurrent sessions ~1K). If you activate a trail Auth code, when the trial period is up, GlobalProtect client and Software sections of the GUI will go blank and say "Operation Failed: An active license is required for this feature". You can still download App updates and manually upload and install PAN-OS though. A trial VM will not produce traffic/threat logs but it will pass traffic (with a limited number of concurrent sessions ~1K). If you activate a trail Auth code, when the trial period is up, GlobalProtect client and Software sections of the GUI will go blank and say "Operation Failed: An active license is required for this feature". You can still download App updates and manually upload and install PAN-OS though.
 +
 +
 +===== Credits =====
 +**Warning** Be aware that the subscription costs get cheaper when you buy more than three subscriptions. I can't (yet) figure out the formula.
 +^ vCPU ^ Model ^ Cost/CPU ^ CPU ^ Panorama ^ Log Collector ^ TP ^ WF ^ DNS ^ GP ^ SD-WAN ^ URL ^ Adv URL ^ DLP ^
 +| 2 | VM-50 | 4.025 | 8.05 | 0.81 | 0.81 | 1.4 | 1.4 | 1.4 | 1.4 | 1.4 | 1.4 | 2.1 | 2.8 |
 +| 2 | VM-100 | 4.025 | 8.05 | 0.81 | 0.81 | 1.4 | 1.4 | 1.4 | 1.4 | 1.4 | 1.4 | 2.1 | 2.8 |
 +| 4 | VM-300 | 4.025 | 16.1 | 1.61 | 1.61 | 2.8 | 2.8 | 2.8 | 2.8 | 2.8 | 2.8 | 4.2 | 5.6 |
 +| 8 | VM-500 | 5.4625 | 43.7 | 4.37 | 4.37 | 7.6 | 7.6 | 7.6 | 7.6 | 7.6 | 7.6 | 11.4 | 15.2 |
 +| 16 | VM-700 | 5.75 | 92 | 9.2 | 9.2 | 16 | 16 | 16 | 16 | 16 | 16 | 24 | 32 |
 +| 2 |  | 4.025 | 8.05 |  |  |  |  |  |  |  |  |  |  |
 +| 3 |  | 4.026666667 | 12.08 |  |  |  |  |  |  |  |  |  |  |
 +| 4 |  | 4.025 | 16.1 |  |  |  |  |  |  |  |  |  |  |
 +| 5 |  | 5.462 | 27.31 |  |  |  |  |  |  |  |  |  |  |
 +| 6 |  | 5.463333333 | 32.78 |  |  |  |  |  |  |  |  |  |  |
 +| 7 |  | 5.462857143 | 38.24 |  |  |  |  |  |  |  |  |  |  |
 +| 8 |  | 5.4625 | 43.7 |  |  |  |  |  |  |  |  |  |  |
 +| 9 |  | 5.75 | 51.75 |  |  |  |  |  |  |  |  |  |  |
 +| 10 |  | 5.75 | 57.5 |  |  |  |  |  |  |  |  |  |  |
 +| 11 |  | 5.75 | 63.25 |  |  |  |  |  |  |  |  |  |  |
 +| 12 |  | 5.75 | 69 |  |  |  |  |  |  |  |  |  |  |
 +| 13 |  | 5.75 | 74.75 |  |  |  |  |  |  |  |  |  |  |
 +| 14 |  | 5.75 | 80.5 |  |  |  |  |  |  |  |  |  |  |
 +| 15 |  | 5.75 | 86.25 |  |  |  |  |  |  |  |  |  |  |
 +| 16 |  | 5.75 | 92 |  |  |  |  |  |  |  |  |  |  |
 +| 17 |  | 5.75 | 97.75 |  |  |  |  |  |  |  |  |  |  |
 +| 18 |  | 5.75 | 103.5 |  |  |  |  |  |  |  |  |  |  |
 +| 19 |  | 5.75 | 109.25 |  |  |  |  |  |  |  |  |  |  |
 +| 20 |  | 5.75 | 115 |  |  |  |  |  |  |  |  |  |  |
 +| 21 |  | 5.75 | 120.75 |  |  |  |  |  |  |  |  |  |  |
 +| 22 |  | 5.75 | 126.5 |  |  |  |  |  |  |  |  |  |  |
 +| 23 |  | 5.75 | 132.25 |  |  |  |  |  |  |  |  |  |  |
 +| 24 |  | 5.75 | 138 |  |  |  |  |  |  |  |  |  |  |
  
paloaltonetworks/licensing_vm.1637238384.txt.gz · Last modified: (external edit)