Palo Alto Networks Knowledgebase: Changing AWS Instance Sizes for a VM-Series (PAN-OS 8.0)
Changing AWS Instance Sizes for a VM-Series (PAN-OS 8.0)
Created On 02/07/19 23:57 PM - Last Updated 02/07/19 23:57 PM
The VM-Series virtualized next-generation firewall has been optimized and expanded to deliver improved performance and expanded capacities, which necessitated changes in the number of cores and memory required. The new resource footprint needs to be matched with the appropriate Instance sizes available on AWS. Refer to the VM-Series system requirements of PAN-OS 8.0 to compare the CPU and memory requirements by SKU.
Upgrading the VM-Series with PAN-OS 8.0 on AWS
To upgrade an existing VM-Series deployment, you will need to first ensure that your VM-Series deployment uses one of the AWS Instances shown below. You can also refer to the Live Community article on VM-Series for AWS Sizing.
* Refers to recommended size based on CPU cores, memory, and network interfaces.
BYOL indicates a bring-your-own-license, whereby the VM-Series has been purchased from your NextWave partner.
PAYG refers to the consumption-based licensing option purchased from the AWS Marketplace. Bundle 1 and Bundle 2 are available on AWS in both hourly and annual licenses.
ENI is elastic network interface on AWS.
The VM-50 is not supported on AWS or Azure.
To determine which products you've purchased or are in use refer to the purchase emails and invoices provided by AWS or Azure. You can review all of your annual subscriptions on theYour Softwarepage of your AWS account.
Upgrading a BYOL or Hourly PAYG on AWS
Determine the size required for your current BYOL or Hourly PAYG deployment based on the table above and then follow the steps below.
Upgrading Your Annual Subscription on AWS for c3.xlarge or c4.xlarge
If you've purchased an annual subscription of Bundle 1 or Bundle 2 on either a c3.xlarge or c4.xlarge Instance size, you will need to execute a cancellation of the annual license and a new purchase on AWS. This process is dictated by AWS policy that ties an annual subscription purchase to an exact instance size, i.e. once an annual subscription is purchased you cannot change its instance size. For more information refer to AWS FAQ on annual subscription.
Steps required for upgrading your annual PAYG on AWS c3.xlarge or c4.xlarge
Export your VM-Series configuration using steps here
Purchase a NEW annual subscription for correct AWS instance size
Deploy the exported config on the new VM-Series instance
Request a CANCEL subscription with Palo Alto Networks and include the PDF of the AWS purchase invoice.
Refund process for Palo Alto Networks
Refund process for Annual Subscriptions of Bundle 1 or Bundle 2 on c3.xlarge or c4.xlarge”
To begin the annual subscription refund process for the VM-Series instance replacement follow the steps below. The refund process is applicable only for AWS annual subscription customers (a) who purchased Bundle 1 or Bundle 2 annual subscriptions with c3.xlarge or c4.xlarge and cannot upgrade to PAN-OS 8.0 due to instance size issue, and (b) made the purchase before PAN-OS 8.0 released on 07-Feb-2017 in the AWS Marketplace.