Downloading and deploying the image is only half the battle. The VM-Series firewall must be properly licensed to enable its security features and to allow traffic to pass through it (in most operational modes).
: You must have a valid support account on the Palo Alto Networks Customer Support Portal (CSP). The image download is entirely gated through this portal. If you do not already have one, you will need to register on the Palo Alto Networks Support site . palo alto download vm image
Upload the QCOW2 file to that directory and rename it to virtioa.qcow2 . Downloading and deploying the image is only half the battle
The following are the standard steps to download the VM-Series OVA file for VMware ESXi: The image download is entirely gated through this portal
The VM-Series provides enterprise-grade security, including application identification, user-based policy enforcement, threat prevention, URL filtering, and Advanced Threat Protection, all delivered through a software-based architecture.
Click the download icon next to the base image (e.g., VMware-vmseries-10.2.3.ova ). Do not download the "dynamic updates" (threat signatures) unless you have a license; those are different files.