Install A Vm-Series Firewall; Provision The Vm-Series Firewall - PaloAlto Networks VM-100 Deployment Manual

Set Up a VM-Series Firewall on an ESXi Server

Install a VM-Series firewall

To install a VM-Series firewall you must have access to the
auth code you received in your order fulfillment email to register your VM-Series firewall and gain access to the
OVF template. The OVF is downloaded as a zip archive that is expanded into three files: the .ovf extension is
for the OVF descriptor file that contains all metadata about the package and its contents; the .mf extension is
for the OVF manifest file that contains the SHA-1 digests of individual files in the package; and the .vmdk
extension is for the virtual disk image file that contains the virtualized version of the firewall.


Provision the VM-Series Firewall

 Perform Initial Configuration
Provision the VM-Series Firewall
Provision a VM-Series Firewall
Step 1 Download the zip file that contains the
OVF template.
Step 2 Before deploying the OVF template, set
up virtual standard switch(es) and virtual
distributed switch(es) that you will need
for the VM-Series firewall.
Note The VM-Series firewall requires that any
attached virtual switch has promiscuous
mode enabled.
VM-Series Deployment Guide
Open Virtualization Format (
Register your VM-Series firewall and obtain the OVF template from:
https://support.paloaltonetworks.com .
Note The zip file contains the base installation. After the base
installation is complete, you will need to download and
install the latest PAN-OS version from the support portal.
This will ensure that you have the latest fixes that were
implemented since the base image was created. For
instructions, see Upgrade the PAN-OS Software
To configure a virtual standard switch for promiscuous mode:
1. Configure a virtual standard switch from the vSphere Client by
navigating to
Home > Inventory > Hosts and Clusters
2. Click the
Configuration
. For each VM-Series firewall attached virtual
Networking
switch, click on
Properties
3. Highlight the virtual switch and click
properties, click the
Security
and then click
Accept OK
groups on the virtual switch.
To configure a virtual distributed switch for promiscuous
mode:
1. Select
Home > Inventory > Networking
Distributed Port Group
tab.
Summary
2. Click and select
Edit Settings
to
Promiscuous Mode
Install a VM-Series firewall
OVF) template. Use the
tab and under click
Hardware
.
. In the vSwitch
Edit
tab and set
Promiscuous Mode
. This change will propagate to all port
. Highlight the
you want to edit and select the
Policies > Security
and then click .
Accept OK
Version.
.
to
and set
13