https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-series-with-aws-gwlb/m-p/1218790#M2330 <P>We are to deploy vm-series in AWS with GWLB. The docs says "</P> <P>To ensure that the VM-Series firewall can inspect traffic that is routed between VPC attachments, you must enable appliance mode on the transit gateway VPC attachment for the security VPC containing the VM-Series firewall."<BR />In my understanding, appliance mode is used to ensure the stickness to one firewall member for bidirectional traffic flow. If yes, does that mean the two members of the firewall are standalone, no cluster between them?<BR />We deployed Checkpoint cluster in Azure with AZURE LB approach, the standby does not reply the LB Probe. So no need to enable appliance mode.<BR /><BR />Anyone can clear this for me ?<BR /><BR />thanks !!</P> Fri, 31 Jan 2025 00:46:36 GMT gongya 2025-01-31T00:46:36Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-series-with-aws-gwlb/m-p/1218790#M2330 <P>We are to deploy vm-series in AWS with GWLB. The docs says "</P> <P>To ensure that the VM-Series firewall can inspect traffic that is routed between VPC attachments, you must enable appliance mode on the transit gateway VPC attachment for the security VPC containing the VM-Series firewall."<BR />In my understanding, appliance mode is used to ensure the stickness to one firewall member for bidirectional traffic flow. If yes, does that mean the two members of the firewall are standalone, no cluster between them?<BR />We deployed Checkpoint cluster in Azure with AZURE LB approach, the standby does not reply the LB Probe. So no need to enable appliance mode.<BR /><BR />Anyone can clear this for me ?<BR /><BR />thanks !!</P> Fri, 31 Jan 2025 00:46:36 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vm-series-with-aws-gwlb/m-p/1218790#M2330 gongya 2025-01-31T00:46:36Z