topic terraform support NGFW VM-Series in the HA pair in Automation/API Discussions https://live.paloaltonetworks.com/t5/automation-api-discussions/terraform-support-ngfw-vm-series-in-the-ha-pair/m-p/419173#M2723 <P>With AWS ingress routing, the HA pair of ngfw-vm can be leverage to inspect all ingress and egress traffic without ELB to mess up ports/IPs, just like the old days of private datacenter.&nbsp; See <A href="https://aws.amazon.com/blogs/aws/new-vpc-ingress-routing-simplifying-integration-of-third-party-appliances/" target="_blank">https://aws.amazon.com/blogs/aws/new-vpc-ingress-routing-simplifying-integration-of-third-party-appliances/</A></P><P>&nbsp;</P><P>However the terraform pan-os provider does not support HA pair config. Basically I have to find out which FW is active in the HA pair, otherwise the commit will fail.</P><P>&nbsp;</P><P>Anyone has better idea how to use terraform to deal with active-passive HA pair? This option is really more attractive compared with any other solution with ELB!!</P><P>&nbsp;</P><P>Suggestion and ideas please. Anyone is making decision for pan-os terraform provider, it would be great to add HA support for terraform!</P><P>&nbsp;</P> Tue, 13 Jul 2021 22:42:10 GMT JZhou4 2021-07-13T22:42:10Z terraform support NGFW VM-Series in the HA pair https://live.paloaltonetworks.com/t5/automation-api-discussions/terraform-support-ngfw-vm-series-in-the-ha-pair/m-p/419173#M2723 <P>With AWS ingress routing, the HA pair of ngfw-vm can be leverage to inspect all ingress and egress traffic without ELB to mess up ports/IPs, just like the old days of private datacenter.&nbsp; See <A href="https://aws.amazon.com/blogs/aws/new-vpc-ingress-routing-simplifying-integration-of-third-party-appliances/" target="_blank">https://aws.amazon.com/blogs/aws/new-vpc-ingress-routing-simplifying-integration-of-third-party-appliances/</A></P><P>&nbsp;</P><P>However the terraform pan-os provider does not support HA pair config. Basically I have to find out which FW is active in the HA pair, otherwise the commit will fail.</P><P>&nbsp;</P><P>Anyone has better idea how to use terraform to deal with active-passive HA pair? This option is really more attractive compared with any other solution with ELB!!</P><P>&nbsp;</P><P>Suggestion and ideas please. Anyone is making decision for pan-os terraform provider, it would be great to add HA support for terraform!</P><P>&nbsp;</P> Tue, 13 Jul 2021 22:42:10 GMT https://live.paloaltonetworks.com/t5/automation-api-discussions/terraform-support-ngfw-vm-series-in-the-ha-pair/m-p/419173#M2723 JZhou4 2021-07-13T22:42:10Z