Versa Cloud NGFW is a subscription-based next-generation firewall delivered as a SaaS offering through cloud marketplaces such as AWS Marketplace. Licensed per account and region, with configurable core counts and an optional remote access VPN add-on, it lets a customer stand up NGFW protection in their cloud environment without provisioning a dedicated appliance.
Key takeaways
- Subscription NGFW sold and billed through cloud marketplaces like AWS.
- Licensed per AWS account and region, not per physical device.
- Core count is selectable: 4, 8, or 16 cores per instance.
- Remote access VPN is an optional, separately priced add-on.
- Deployed via a Versa Portal license plus an AWS CloudFormation template.
On this page: Why it mattersHow it worksVersa Cloud NGFW licensing and deployment optionsVersa Cloud NGFW & VersaFAQ
Why is Versa Cloud NGFW important?
Standing up a next-generation firewall traditionally means provisioning an appliance – physical, virtual, or containerized – sizing it, and managing its lifecycle. For a team that already lives in a cloud marketplace workflow, that’s friction: procurement, deployment, and billing all happen outside the tools they already use. Versa Cloud NGFW removes that friction by making the firewall itself a marketplace SaaS subscription: find it in AWS Marketplace, subscribe, and the license and billing flow through the AWS account the same way any other marketplace product does.
That model also matters for how quickly protection can go live. Because the service is licensed per account and region rather than tied to a specific device build, deploying it is a matter of setting license parameters in the Versa Portal – instance name, region, core count – and launching a CloudFormation template, rather than sizing and shipping hardware or building a VM image from scratch.
What is Versa Cloud NGFW?
Versa Cloud NGFW is a next-generation firewall consumed as a subscription SaaS service rather than an appliance you deploy yourself. A customer subscribes through a cloud marketplace listing – currently AWS Marketplace – which creates both the marketplace subscription and a linked Versa Networks portal account used to manage the license. From that Versa Portal account, the customer adds and deploys a license against a specific AWS account ID and AWS region, selects a core count, and chooses a license tier for the NextGen Firewall license type.
Deployment itself happens through an AWS CloudFormation template: the Versa Portal generates a template describing the stack of AWS resources the service needs, and launching it in AWS provisions the underlying infrastructure as a single managed group rather than a set of resources configured by hand.
Versa Cloud NGFW licensing and deployment options
Licensing is scoped per AWS account and region – a customer can hold separate license instances for different accounts or regions rather than a single global license. Each instance’s compute size is set by core count, selectable as 4, 8, or 16 cores, with a Professional license tier available for the NextGen Firewall license type at the time of subscription. Remote access VPN is an optional add-on, toggled on or off per instance; enabling it is subject to separate pricing shown in the Versa Portal before deployment. Unsubscribing through AWS Marketplace cancels the subscription and deletes the license and its configuration from Versa Portal, but the underlying AWS EC2 instance keeps running and must be removed manually from the AWS account.
Versa Cloud NGFW & Versa
Versa Cloud NGFW delivers the same category of protection – next-generation firewall inspection with application, intrusion-prevention, and policy enforcement capability – that NGFW describes as part of Versa’s broader security stack, but packaged as a standalone cloud subscription rather than a capability running on a VOS appliance managed through Director. It is managed through its own Versa Portal onboarding flow, scoped to the AWS account and region where it’s deployed, independent of a Director-orchestrated fleet.
Frequently asked questions
How do I subscribe to Versa Cloud NGFW?
Through AWS Marketplace: search for Versa Cloud NGFW (SaaS), subscribe, and register a Versa Networks portal account during the subscription flow. Once registered, you use that Versa Portal account to add a license and deploy the service.
What core counts are available for Versa Cloud NGFW?
An instance can be licensed at 4, 8, or 16 cores, selected when adding the license in the Versa Portal. The available license types and tiers depend on your subscription, with Professional available for the NextGen Firewall license type.
Is remote access VPN included with Versa Cloud NGFW?
No, it’s optional. A toggle in the license configuration screen enables or disables remote access VPN per instance, and enabling it is subject to separate pricing shown in the Versa Portal before you deploy.
How is a Versa Cloud NGFW instance actually deployed?
After adding and deploying a license in Versa Portal, you launch an AWS CloudFormation template generated for that instance. The template provisions the required AWS resources as a single stack, which you can also download as a JSON file.
What happens if I unsubscribe from Versa Cloud NGFW?
Unsubscribing in AWS Marketplace cancels the subscription and deletes the license and its data from Versa Portal. The AWS EC2 instance that was created for the license keeps running and must be removed manually from your AWS account.
More on Versa
If you want to learn more, these are sources we trust.
| Versa Networks: products | Versa Networks: secure SD-WAN | Versa Academy |
|---|---|---|
| The vendor’s product pages covering Versa’s NGFW and cloud-delivered security offerings. | How Versa packages security services alongside SD-WAN across its platform. | Training and labs covering Versa security services, including cloud-delivered offerings. |
Related terms
If you’re reading about Versa Cloud NGFW, these are worth looking at next.
| Next-Generation Firewall | Remote Access VPN | Region |
|---|---|---|
| The firewall category Versa Cloud NGFW delivers as a standalone cloud subscription. | The optional add-on service a Versa Cloud NGFW instance can enable for remote users. | The AWS scope a Versa Cloud NGFW license is tied to alongside the AWS account. |