: Save the file to your local disk. Ensure you have sufficient storage, as these images are typically several gigabytes. Step 3: Deploying the VM in VMware Workstation
Once downloaded, you need to import this file into your virtualization software. Open .
Running Palo Alto VM-Series on VMware Workstation is a practical way to evaluate and test next-generation firewall features locally. With correct image selection, hardware allocation, and licensing, you can set up an effective lab environment for learning, proofs-of-concept, or development testing. Keep the VM isolated, patched, and licensed appropriately.
The final validation step involves connecting to the intuitive Palo Alto graphical interface to start building security profiles. Open a web browser on your host machine.
: Choose the version (e.g., PAN-OS 10.x or 11.x) and download the .ova file. 2. Import into VMware Workstation palo alto vm download vmware workstation
: A common troubleshooting step involves manually editing the .vmx file to change the adapter type from e1000 to vmxnet3 for improved performance and compatibility. Initial Access and Deployment
Add 2-3 additional network adapters. Set these to Host-Only or custom VMnet segments to simulate internal/external networks in your lab. Click OK . 4. Booting and Initial Configuration Power on the VM. Wait for the console to show the login prompt. Log in with default credentials: Username: admin Password: admin
Wait for the import process to complete. VMware will convert the OVF to a VMX file, which may take a few minutes. 3. Configuring Virtual Machine Settings
Setting up a Palo Alto VM-Series firewall on VMware Workstation : Save the file to your local disk
Provide a name for your VM (e.g., "PA-Lab-Firewall") and choose a storage path. Import: Click Import . This may take several minutes. 4. Initial Network Configuration
: A well-known issue with evaluation licenses is that the firewall will shut down or become unresponsive if its system clock drifts, as the license is highly sensitive to time validation. Before powering on the VM, it's highly recommended to disable the VMware Tools time synchronization for the VM. You can do this by adding the following lines to the virtual machine's .vmx configuration file:
Which specific (e.g., 10.2, 11.0) you plan to run.
You can use the auth code provided through the Palo Alto Networks Academy or a temporary evaluation license. Keep the VM isolated, patched, and licensed appropriately
A: Yes, you can configure Palo Alto VM to use multiple network interfaces. You can add multiple network adapters to the virtual machine and configure them in the Palo Alto VM settings.
Type exit to leave configuration mode once the commit process completes successfully. Accessing the Web UI Open a web browser on your host machine.
Look for the PA-VM-ESX version (e.g., PA-VM-ESX-10.1.0.ova ) and click the download icon. 3. Importing to VMware Workstation