Changing AWS Instance Sizes for a VM-Series (PAN-OS 8.0)

Changing AWS Instance Sizes for a VM-Series (PAN-OS 8.0)

Created On 09/25/18 15:12 PM - Last Modified 07/10/23 05:58 AM


The VM-Series virtualized next-generation firewall has been optimized and expanded to deliver improved performance and expanded capacities, which necessitated changes in the number of cores and memory required. The new resource footprint needs to be matched with the appropriate Instance sizes available on AWS. Refer to the VM-Series system requirements of PAN-OS 8.0 to compare the CPU and memory requirements by SKU.


  • VM Series
  • PAN-OS 8.0


Upgrading the VM-Series with PAN-OS 8.0 on AWS
To upgrade an existing VM-Series deployment, you will need to first ensure that your VM-Series deployment uses one of the AWS Instances shown below. Please refer to the article, VM-Series for AWS Sizing.

Screen Shot 2017-02-02 at 5.37.50 PM.png 
* Refers to recommended size based on CPU cores, memory, and network interfaces.


  • BYOL indicates a bring-your-own-license, whereby the VM-Series has been purchased from your NextWave partner.
  • PAYG refers to the consumption-based licensing option purchased from the AWS Marketplace. Bundle 1 and Bundle 2 are available on AWS in both hourly and annual licenses.
  • ENI is elastic network interface on AWS.
  • The VM-50 is not supported on AWS or Azure.

To determine which products you've purchased or are in use refer to the purchase emails and invoices provided by AWS or Azure. You can review all of your annual subscriptions on the Your Software page of your AWS account.

Upgrading a BYOL or Hourly PAYG on AWS
Determine the size required for your current BYOL or Hourly PAYG deployment based on the table above and then follow the steps below.

Option 1: Switch Instance size (without deleting/terminating) - Recommended

  1. Stop instance
  2. Switch size in AWS EC2 Console
  3. Re-start instance

Screen Shot 2017-02-02 at 5.38.12 PM.png 

Option 2: Replace/delete the Instance

  1. Create new instance of correct size
  2. Import PAN-OS configuration from older instance

Notes : If you want to change the instance type on your VM-Series firewall that is licensed with the BYOL option, you must deactivate the VM before you switch the instance type to ensure that your license is valid. Please refer to this link as well.

Upgrading Your Annual Subscription on AWS for c3.xlarge or c4.xlarge
If you've purchased an annual subscription of Bundle 1 or Bundle 2 on either a c3.xlarge or c4.xlarge Instance size, you will need to execute a cancellation of the annual license and a new purchase on AWS. This process is dictated by AWS policy that ties an annual subscription purchase to an exact instance size, i.e. once an annual subscription is purchased you cannot change its instance size. For more information refer to AWS FAQ on annual subscription.

Steps required for upgrading your annual PAYG on AWS c3.xlarge or c4.xlarge

  1. Export your VM-Series configuration using steps here
  2. Purchase a NEW annual subscription for correct AWS instance size
  3. Deploy the exported config on the new VM-Series instance
  4. Request a CANCEL subscription with Palo Alto Networks and include the PDF of the AWS purchase invoice.

Refund process for Palo Alto Networks - Annual Subscriptions of Bundle 1 or Bundle 2 on c3.xlarge or c4.xlarge”
To begin the annual subscription refund process for the VM-Series instance replacement follow the steps below. The refund process is applicable only for AWS annual subscription customers (a) who purchased Bundle 1 or Bundle 2 annual subscriptions with c3.xlarge or c4.xlarge and cannot upgrade to PAN-OS 8.0 due to instance size issue, and (b) made the purchase before PAN-OS 8.0 released on 07-Feb-2017 in the AWS Marketplace.
  • Send an email to with the following information
  • Attach PDF of your AWS invoices showing the purchase of annual subscription of VM-Series Bundle 1 or Bundle 2 with either c3.xlarge or c4.xlarge.
  • In the email include: your AWS account number, an itemized list of dates when the purchases were made and the requested refunds for each.

This information is required for Palo Alto Networks to request a refund to be processed by AWS.
For more information refer to to AWS FAQ on annual subscription.

  • Print
  • Copy Link

Choose Language