https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/security-policy-in-vm-series-container-and-dags/m-p/310686#M766 <P>In AWS environment we have containers that do the job and then terminate. How is is possible to do a security policy on containers? DAG is not detecting the IP Address used by container to egress out to internet.</P><P>&nbsp;</P><P>Secondly, how a single IP Address can be filtered for an instance that has multiple ENIs? VM Information sources doesn't list ENI as monitored source. Even by doing through custom tag and a subnet assigned to ENI, it returns all IP addresses including Elastic IPs</P> Wed, 12 Feb 2020 01:07:30 GMT Mubashir 2020-02-12T01:07:30Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/security-policy-in-vm-series-container-and-dags/m-p/310686#M766 <P>In AWS environment we have containers that do the job and then terminate. How is is possible to do a security policy on containers? DAG is not detecting the IP Address used by container to egress out to internet.</P><P>&nbsp;</P><P>Secondly, how a single IP Address can be filtered for an instance that has multiple ENIs? VM Information sources doesn't list ENI as monitored source. Even by doing through custom tag and a subnet assigned to ENI, it returns all IP addresses including Elastic IPs</P> Wed, 12 Feb 2020 01:07:30 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/security-policy-in-vm-series-container-and-dags/m-p/310686#M766 Mubashir 2020-02-12T01:07:30Z