Basic rule creation in VM-300 in GCP

ExpertHealth — Wed, 07 Sep 2022 12:37:04 GMT

Hi All,

We are starting our journey with Palo Alto in GCP. We have FW up and running with 3 interfaces (MGMT-NIC0, Untrusted-NIC1, Trusted-NIC2).

We struggle to create a basic rule which allows i.e. PING from the host located in Untrusted zone to the host located in Trusted zone. We can see the traffic going through the FW in the Monitor section and growing number of hits in the Policy rule itself, however there's no response to PING and Monitor says that traffic to 'curl' command is Incomplete whereas PING has aged-out.

Please advise what we need to do make it working?

Great thanks in advance,

Slawek

Re: Basic rule creation in VM-300 in GCP

Mitesh_Nandu — Tue, 10 Oct 2023 15:56:27 GMT

Hi Slawek,

Respect you kindly check the below points in GCP:-

1. In Trust VPC have you configured default route pointing towards PA-VM Trust interface.

2. Ingress Firewall rule in GCP.

topic Re: Basic rule creation in VM-300 in GCP in VM-Series in the Public Cloud

Basic rule creation in VM-300 in GCP

Re: Basic rule creation in VM-300 in GCP