Right-click on your target Host, Cluster, or Resource Pool and select .
Ensure that the underlying VMware vSwitch or Distributed vSwitch Port Groups handling promiscuous traffic (such as Tap or V-Wire modes) have Promiscuous Mode , MAC Address Changes , and Forged Transmits set to Accept within their security policies.
: VMware vSphere security policies block MAC address forging or promiscuous mode operations required by advanced firewall deployments. Pa-vm-esx-11.0.0.ova
Verify the SHA-256 checksum of the downloaded file to guarantee image integrity and security.
Power on the virtual machine and open the VMware Web Console. Wait for the login prompt to stabilize (this may take several minutes on the initial boot). Log in with the default credentials: : admin Password : admin Right-click on your target Host, Cluster, or Resource
In your vSphere Client, right-click the ESXi host and select Deploy OVF Template .
The PA-VM-ESX-11.0.0.ova file is the standard Open Virtual Appliance package for deploying Palo Alto Networks VM-Series firewalls, introducing PAN-OS 11.0 features on VMware ESXi environments. This version focuses on advanced AI-powered threat prevention, WildFire enhancements, and improved AIOps integration. For comprehensive documentation, refer to the Palo Alto Networks Customer Support Portal. Verify the SHA-256 checksum of the downloaded file
The architecture maintains strict logical isolation between management functions (log processing, routing updates, administrative access) and data forwarding engines to ensure predictable, wire-speed security filtering under heavy traffic loads. Prerequisites and Resource Allocation Metrics
Natively supports explicit and transparent proxying, allowing organizations with legacy proxy architectures to migrate more easily to a modern NGFW.
After the deployment, perform these steps to ensure functionality:
After the commit command successfully completes, the configuration locks into the active control plane, and the management interface becomes reachable via HTTPS ( https:// ). Licensing and Next Steps