Assistance with Design of Palo Alto Firewalls & Panorama

N.Carabia — Sun, 31 Mar 2024 08:12:52 GMT

Hello All,

I have attached network topology based on Fortigate firewalls which needs to be migrated to Palo Alto on all 3 sites, Plus I Want to use PANOS SDWAN with Panorama as well, Brief description of network is

- HO site will have 2 x PA 1410 in A/P HA

- Virtual Panorama will be deployed in HO site

- Branch A don't have a static Public IP , hence It makes a dialup IPSEC VPN connection to HO

- Branch B has a static Public IP and makes IPSEC VPN connection to HO site.

I have below concerns when considering PANOS SDWAN with Panorama,

- Can I replace site-site IPSEC VPN with PANOS SDWAN Dynamic VPN setup ? for this I suppose Panorama should be on a central location & not dependent on Site to Site VPN to connect & manage remote branch firewalls.

- Shall I perform DNAT on HO Firewall to expose Panorama to public IP & connect to Branch Firewalls.

topic Assistance with Design of Palo Alto Firewalls & Panorama in Panorama Discussions

Assistance with Design of Palo Alto Firewalls & Panorama