topic NGFW with azure gateway load balancer in VM-Series in the Public Cloud

NGFW with azure gateway load balancer

Pat-Allen — Mon, 19 Dec 2022 20:45:33 GMT

If I have an Azure Gateway Load Balancer set up with my NGFWs (Interface eth1/1), do I have to use a separate interface for traffic originating inside Azure to point to? I would assume yes since GWLB technically uses vxlan and so I'd need a separate interface to stick in the backend pool of an internal LB I have set up (where all the default routes point to)

Thanks!

Pat

Re: NGFW with azure gateway load balancer

Julienmongin — Wed, 04 Jan 2023 15:57:26 GMT

Internal Traffic will not go via the Gateway Loadbalancer

you can't have GWLB and Internal LB on the same backend system (PA-VM).

So you should have 2 instances set of Palo alto, One for Internet Traffic with the GWLB and one for the Internal Traffic with the Internal LB