topic Re: PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment in VM-Series in the Public Cloud

PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment

iksudheer — Fri, 24 Aug 2018 03:00:29 GMT

Dear All, Can you share your views/suggestions for below questions. Thank you

1. What is the standard best practice for setting up redundant VPN tunnel with NAT-T with PaloAlto between datacenter and AWS customer environment
2. Can we have two PaloAlto FW in two different vlans as Active-Active configuration without any sort of sync between them behind a load balancer.

Appreciate your inputs.

Re: PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment

jperry1 — Fri, 24 Aug 2018 17:08:02 GMT

VM Series in AWS supports Active/Passive only and must be in the same Availability Zone. Here is where you can find more information on this setup

https://www.paloaltonetworks.com/documentation/81/virtualization/virtualization/set-up-the-vm-series-firewall-on-aws/high-availability-for-vm-series-firewall-on-aws#id3ceb1d47-a968-4a6e-8a78-b76ec1c4a9a9

Re: PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment

iksudheer — Fri, 24 Aug 2018 21:23:18 GMT

Dear jperry1

Thanks much for your inputs.Will go through the link.

Re: PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment

OtakarKlier — Tue, 28 Aug 2018 17:01:51 GMT

Hello,

Also check out the documentation on AWS, they have best practives and deployment guides:

https://www.paloaltonetworks.com/documentation/81/virtualization/virtualization/set-up-the-vm-series-firewall-on-aws/deployments-supported-on-aws

Cheers!