You can turn the VM-Series into a VPN gateway.
If you just want to see the menus and understand the workflow: palo alto firewall simulator