topic Re: VM series with NSX integration in VM-Series in the Private Cloud

VM series with NSX integration

MGRashmi — Tue, 06 Mar 2018 07:36:35 GMT

Hi Team,

I am currently looking for the option of configuring NSX for one of our European customers and i am exploring the option of using Palo Alto VM series firewall to secure East-West traffic inside NSX.

I am looking for the count of license that would be required for using the VMseries firewall for approximately 50 ESXi hosts. In the documents that i read, it is mentioned that one Palo Alto virtual firewall instance will be deployed per ESXi host.

Does this mean, i need to purchase 50 Palo Alto virtual firewalls for 50 ESXi hosts? How will the virtual firewalls be charged?

If i deploy one VM per host, is there a way i can create a "zone admin" if my ESXi hosts are shared and i deploy virtual firewalls per host?

Re: VM series with NSX integration

thakala — Fri, 09 Mar 2018 07:50:31 GMT

Hello,

Each ESXi host requires a licensed firewall so if you have 50 ESXi host you need 50 VM-Series licenses. VM-Series pricing is same for non-NSX and NSX integrated solutions, so you need to purchase perpetual licenses which are all paid up front with support and security update subscritions for specific time frame (1 or 3 years etc).

Unfortunaltely PANW does not have rental license model for Service Providers like VMware (VCPP) and Microsoft (SPLA) have. However, 50 licenses would be rather big deal so there might be some good discounts or other options for such deal.

As I understand Panorama capabilities, there is no such multitenancy support currently which would allow you to specificy user roles so that they could see and manage rules matching only specific zone. So I think answer to your last question is no.

Re: VM series with NSX integration

MGRashmi — Fri, 09 Mar 2018 07:36:44 GMT

Hi thakala,

Thanks a lot. This clearly answers my query.

Re: VM series with NSX integration

vmwarensxuser — Fri, 05 Feb 2021 09:00:18 GMT

I work with the integration of NSX and PAN VM 300 series.

Can we get pan VM info such as publisher name and product details from the NSX using CLI or REST API ?

Thanks,

Harirkishna

Re: VM series with NSX integration

vmwarensxuser — Fri, 05 Feb 2021 09:03:23 GMT

I am looking to get the VM details from VMware NSX.

Can we get pan VM or Panorama info such as publisher name and product details from the NSX using CLI or REST API ?

Thanks,

Harirkishna