2
VM-Series
Deployment
Guide
VM-Series Models
About the VM-Series Firewall
VM-Series Models
The VM-Series firewall is available in four models—VM-100, VM-200, VM-300, and VM-1000-HV.
All four models can be deployed as guest virtual machines on VMware ESXi and on Citrix NetScaler SDX; on
VMWare NSX, only the VM-1000-HV is supported. The software package (
.xva
or
.ovf
file) that is used to deploy
the VM-Series firewall is common across all models. The VM-Series model is driven by license; when you apply
the license on the VM-Series firewall, the model number and the associated capacities are implemented on the
firewall.
Each model can be purchased as an Individual or an Enterprise version. The Individual version is in multiples
of 1. The orderable SKU, for example PA-VM-300, includes an auth-code to license one instance of the
VM-Series firewall. The Enterprise version is available in multiples of 25. For example, the orderable SKU
PAN-VM-100-ENT has a single auth-code that allows you to register 25 instances of the VM-100.
Each model of the VM-Series firewall is licensed for a maximum capacity. Capacity is defined in terms of the
number of sessions, rules, security zones, address objects, IPSec VPN tunnels and SSL VPN tunnels that the
VM-Series firewall is optimized to handle. When purchasing a license, make sure to purchase the correct model
for your network requirements. The following table depicts some of the capacity differences by model:
For information on the platforms on which you can deploy the VM-Series firewall, see
VM-Series Deployments
.
For general information, see
About the VM-Series Firewall
.
Model
Sessions
Security
Rules
Dynamic IP
Addresses
Security Zones
IPSec VPN
Tunnels
SSL VPN
Tunnels
VM-100
50000
250
1000
10
25
25
VM-200
100000
2000
1000
20
500
200
VM-300
250000
5000
1000
40
2000
500
VM-1000-HV
250000
10000
100000
40
2000
500
