You can provision the VM using the CLI with the virt-install utility. Execute the following command as root or with sudo privileges:
Set the filter to PAN-OS for VM-Series KVM Base Images . Locate version 9.0.1 and download the .qcow2 file. Common Use Cases
: Map the virtual machine's vCPUs directly to physical CPU cores on the host. This prevents the Linux scheduler from moving processing threads across different CPU sockets, reducing cache misses.
In the hardware settings, add your additional network interfaces. Ensure all network device models are explicitly set to for optimal driver compatibility. Click Apply and then Begin Installation . 4. Initial Access and Bootstrap Configuration Pa-vm-kvm-9.0.1.qcow2
qm start $VM_ID
: The standard disk image format for QEMU/KVM, supporting "copy-on-write" for efficient storage. Why Use PAN-OS 9.0?
: Enable Data Plane Development Kit (DPDK) to accelerate packet processing. Important Considerations for PAN-OS 9.0 You can provision the VM using the CLI
Palo Alto Networks provides official documentation for deploying VM‑Series on KVM:
A functional PA-VM deployment requires at least three distinct network interfaces:
According to the NIST FIPS 140-2 Security Policy for PAN-OS 9.0 , this virtual firewall file creates a distinct Logical Cryptographic Module (LCM) boundary inside the guest environment, managing security mechanisms at a programmatic layer. Minimum System Requirements Common Use Cases : Map the virtual machine's
The naming convention follows a clear logic:
: Ensure your host has at least 2 vCPUs and 4GB of RAM (minimum requirements for the VM-Series).
Note: PAN-OS forces an immediate password change upon the first successful authentication event. Configuring Static IP Settings
This specific KVM image is a favorite for network engineers building "home labs" or testing topologies. GNS3 & EVE-NG: This image is the standard choice for GNS3 users