Who rated this post

Hi @Schneur_Feldman ,

The last time that I ran the calculator https://www.paloaltonetworks.com/resources/tools/ngfw-credits-estimator, purchasing credits for Panorama was cheaper than purchasing support.  You configure the smallest NGFW VM allowed, and add Panorama to it.  You don't have to deploy the NGFW.

Here's how it works:

1. Purchase credits.
2. Create a deployment profile in the CSP mapping resources and licenses to credits.
3. The VM- or CN-Series gets its resource and license allocation from the deployment profile.

There are 2 main options for VM Panorama:

1. Purchase permanent device license and subscription support.  You own Panorama, but require support.
2. Purchase NGFW credits and "lease" Panorama every year.  NGFW credits include support for free.

The credits are a good deal for VM-Series.  I think they are a lot cheaper than the cloud marketplaces.

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/license-the-vm-series-firewall/...

Thanks,

Tom