The Palo Alto Networks VM-Series comprises three virtualized next-generation firewall models – VM-100, VM-200, and VM-300, supported on VMware ESXi 4.1 and ESXi 5.0 platforms. 2, 4 or 8 CPU cores on the virtualized server platforms can be assigned for next-generation firewall processing. Up to 1 Gbps firewall throughput with App-ID enabled can be supported with 4 CPU cores running. To ensure that management is accessible under periods of heavy traffic, the data plane and the control plane are separated. In addition, Palo Alto Network’s single-pass software architecture offers a unique architecture that processes functions in a single pass to reduce latency.
The VM-Series runs PAN-OSTM, a security-specific operating system that safely enables intra-virtual machine traffic, protects against all known and unknown threats, and integrates flexibly in the virtualized environment at layers 1, 2 or 3. In addition, the PAN-OS next-generation firewall capabilities provide the ability to tie security policies to virtual machine adds, moves and changes and enable the orchestration of security policies in lock step with virtual workload creation.