Palo Alto Networks VM-Series Virtual Firewall (VM-700)

The Palo Alto Networks VM-Series VM-700 is the highest-capacity virtual next-generation firewall in the VM-Series product line, purpose-built for deployment in virtualized data centers, private cloud environments, and software-defined networking (SDN) fabrics. Running PAN-OS, it delivers the complete set of Palo Alto Networks NGFW capabilities—App-ID, User-ID, Content-ID, and Device-ID—entirely in software, enabling consistent security policy enforcement without dependence on physical appliance form factors. The VM-700 is engineered to consume significant virtualized compute resources to achieve throughput levels suited to high-bandwidth east-west and north-south traffic segmentation within large-scale virtualized infrastructures.

The VM-700 supports deployment on hypervisors including VMware ESXi, KVM, and Microsoft Hyper-V, as well as integration with private cloud orchestration platforms. It participates natively in dynamic address group updates and XML API-driven automation, allowing security policies to follow workloads as they migrate or scale. Advanced threat prevention, URL filtering, WildFire cloud-delivered malware analysis, DNS Security, and GlobalProtect are all available as licensed services running on the same PAN-OS instance, providing feature parity with hardware-based PA-Series appliances.

Primary target workloads for the VM-700 include service provider virtualized network functions (VNFs), large enterprise private cloud segmentation, high-throughput inter-VLAN and inter-tenant inspection, and centrally managed multi-zone architectures governed through Panorama. The VM-700 is managed identically to all other PAN-OS devices, enabling unified visibility, log forwarding to Cortex Data Lake, and consistent policy frameworks across hybrid environments.

Ideal for

• High-throughput east-west traffic segmentation within large VMware NSX-T or KVM-based private cloud environments requiring micro-segmentation at scale
• Service provider NFV deployments where virtual network functions demand maximum firewall capacity within a software-defined infrastructure
• Multi-tenant data center architectures requiring per-tenant NGFW instances with full App-ID and threat prevention at high aggregate throughput
• Centralized internet gateway enforcement in virtualized environments where physical appliance insertion is operationally impractical
• Compliance-driven network segmentation for regulated workloads (PCI-DSS, HIPAA) within virtualized infrastructure requiring deep packet inspection and full session logging
• Panorama-managed hub-and-spoke virtual security deployments across multiple private cloud zones with consistent policy enforcement and unified telemetry

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.