topic Panorama managed Cloud NGFW (AWS) - Internal FQDNs in Cloud NGFW for AWS Discussions

Panorama managed Cloud NGFW (AWS) - Internal FQDNs

vsurresh — Wed, 29 Nov 2023 09:25:54 GMT

I'm currently planning on setting up and testing Cloud NGFW in AWS and have a question about using Panorama for management. Specifically, is it possible to use internal FQDNs with NGFW instances? Can these instances resolve internal FQDNs using our own DNS servers or even AWS-provided DNS servers? I know this is possible with Prisma Access, but I haven't found clear information in the documentation about Cloud NGFW. Any insights or experiences would be greatly appreciated!

Re: Panorama managed Cloud NGFW (AWS) - Internal FQDNs

reaper — Wed, 29 Nov 2023 10:13:21 GMT

if you're able to build a tunnel between the NGFW and your datacenter (or set up internal routing if your DNS servers are also in AWS) that will be perfectly possible

Re: Panorama managed Cloud NGFW (AWS) - Internal FQDNs

vsurresh — Wed, 29 Nov 2023 11:25:13 GMT

Thank you. Ideally, I want to use the default VPC DNS server (.2 address). Do you happen to know which DNS server the instances will use by default? If they could use the .2 address that would be great.

Re: Panorama managed Cloud NGFW (AWS) - Internal FQDNs

reaper — Wed, 29 Nov 2023 11:40:36 GMT

the default NGFW configuration does not have DNS servers configured, you need to fill those in yourself. you can use the .2's of the mgmt subnet