topic Re: AWS Transit VPC -VPN with PA VM-300 in VM-Series in the Public Cloud

AWS Transit VPC -VPN with PA VM-300

Krishnasg — Mon, 06 Aug 2018 16:37:45 GMT

Hi,

Did anyone built Transit VPC Deployment using Palo Alto VM-300 series firewall?

We are planning to provision 1XVM-300 firewall appliance in each AZ of transit VPC. However I am concerned about number of VPN tunnels each device can handle? Are there any VPN limitatons with PA VM-300 running on AWS ?

Thanks,

Re: AWS Transit VPC -VPN with PA VM-300

hshah — Mon, 06 Aug 2018 16:40:55 GMT

Please refer to the following document. Its 2000 for PAN-Os 8.0.x. I think AWS has some limitation on how may route it can learn over IPsec. In that case, you may want to advertise just default route from PANW firewall.

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/virtualization-features/vm-series-firewall-performance-enhancements/vm-series-model-capacity-and-performance.html#idfc206fb5-455c-4c2d-87d7-20378118fccd

Re: AWS Transit VPC -VPN with PA VM-300

Krishnasg — Mon, 06 Aug 2018 17:57:07 GMT

that helps.

Thanks for the quick response.