Palo Alto VM-Series in EVE-NG, already installed
Every CloudLabBox workspace has the VM-Series firewall and Panorama in its Add Node list. Use them to practise PAN-OS security policy, App-ID, NAT and VPNs, managed on the firewall or from Panorama.
Choose a planCheck it in the free demo
- Vendor
- Palo Alto Networks
- In Add Node
- 24 images
- Templates
paloaltopanorama- Newest
paloalto-11.2.5
Installed versions
Every VM-Series and Panorama name in the Add Node image list, exactly as you’ll pick it.
Started in our checksEach links to the tested tip below.
Template paloalto
VM-Series (PAN-OS)
paloalto-11.2.5paloalto-11.2.3-h3paloalto-11.0.0paloalto-10.2.5-Pre-Licensed-EvalStarted in our checkspaloalto-10.2.5paloalto-10.2.3paloalto-10.2.2paloalto-10.1.0paloalto-10.0.4-Pre-Licensed-EvalStarted in our checkspaloalto-10.0.4-evalpaloalto-10.0.0.tarpaloalto-10.0.0
Show 7 older
paloalto-9.1.2paloalto-9.1.0paloalto-9.0.4paloalto-9.0.1paloalto-8.1.0paloalto-8.0.0paloalto-6.1.0
Template panorama
Panorama
panorama-10.2.3panorama-10.1.6panorama-10.1.0panorama-10.0.0panorama-9.1.2
Add it to a lab
In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.
| Image | Template | CPU | RAM | Interfaces | Console |
|---|---|---|---|---|---|
| VM-Series (PAN-OS) | paloalto | 4 | 8192 MB | 4 interfaces: mgmt, then eth1/1 to eth1/3 | telnet |
| Panorama | panorama | 4 | 16384 MB | 1 interface | VNC |
EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 4 vCPU and 16,384 MB, more than the free demo’s 6 vCPU and 8 GB, so use the demo to find the image and a plan to run it.
A VM-Series firewall managed from Panorama
Put a VM-Series firewall between an inside and an outside IOSv router and manage it from Panorama with a template and a device group. You practise zones, security rules and NAT pushed from central management.
- 1×VM-Series (PAN-OS)
paloalto4 vCPU, 8192 MB - 1×Panorama
panorama4 vCPU, 16384 MB - 2×IOSv
vios1 vCPU, 1024 MB each
Added with these defaults, the lab uses 10 vCPU and 26 GB of RAM. The smallest plan that fits is Professional, with 18 vCPU and 32 GB: £7.50 a day, or £2 an hour On-Demand.
Licences are yours to bring
CloudLabBox doesn't provide PAN-OS licences or subscriptions, and an image's name isn't an entitlement. The two Pre-Licensed-Eval images run on retained old evaluations, which aren't renewed licences. The guided Palo Alto labs run paloalto-11.2.5 with no licence: file blocking, data filtering, custom URL categories, external lists, decryption, User-ID, IPsec and HA work, and it gets no threat, antivirus, WildFire or PAN-DB updates. For those updates, and for every other image, including the other PAN-OS 11.x images, bring your own licence or a Palo Alto Networks evaluation.
The images run only inside your CloudLabBox workspace; they aren’t available to download.
Guided labs that use VM-Series and Panorama
Ready-made labs in the Shared folder of every lab workspace, each with a scenario, tasks, checks and the full solution. Here are 8 of the 32 that use it, from 2 courses, counted on 2 November 2026.
Questions about VM-Series and Panorama
What are Palo Alto Networks VM-Series and Panorama?
The VM-Series is Palo Alto Networks' firewall as a virtual machine, running PAN-OS: App-ID, security policy, NAT, GlobalProtect and IPsec. Panorama, its central management server, is installed too.
What's the difference between the VM-Series and Panorama images?
VM-Series images are the firewall itself, on the paloalto template. Panorama images are the management server for those firewalls, on the panorama template; add one only if your lab practises central management.
Which VM-Series interface is management?
EVE-NG labels the first interface mgmt and the next three eth1/1 to eth1/3, the PAN-OS data interfaces. Keep management on its own network and send traffic through the data interfaces.
How do I open the PAN-OS web interface from my own browser?
Give the management interface an address on a lab network. Then right-click the running firewall in your lab and choose Web page: the PAN-OS web interface opens in a new browser tab.
Palo Alto: which images can I try without bringing my own licence?
paloalto-10.2.5-Pre-Licensed-Eval and paloalto-10.0.4-Pre-Licensed-Eval have passed console and web-login checks using their retained old evaluations. Their required historical guest date is applied automatically at each start in existing and new labs. These evaluations are not renewed licences. The guided Palo Alto labs run paloalto-11.2.5 with no licence, so it gets no threat, antivirus, WildFire or PAN-DB updates. For those updates, and for other standard images, including the other PAN-OS 11.x images, bring the licence or vendor evaluation required for your exercise.
Palo Alto: why does an evaluation stop after enabling NTP?
These two old evaluations depend on a historical guest date. Enabling NTP or setting today's date inside the guest can invalidate them and bring back the shutdown behaviour. Their clock also affects certificates, logs and other time-sensitive exercises. Allow management services to finish initialising before judging a fresh node's login or web page.
Palo Alto: are Advanced SD-WAN and subscriptions included?
No. CloudLabBox does not provide Advanced SD-WAN or other vendor subscriptions. Check Device > Licenses in PAN-OS and use your own suitable entitlement or vendor evaluation for the features you need.
Which VM-Series and Panorama images are installed?
24 images (19 VM-Series (PAN-OS), 5 Panorama), all listed on this page exactly as Add Node shows them. The newest is paloalto-11.2.5.
How much CPU and RAM does a VM-Series and Panorama node use?
When you add one, the paloalto template adds 4 vCPU and 8192 MB of RAM; the panorama template adds 4 vCPU and 16384 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.
More images
CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.