topic Re: Panorama AWS Plugin details? in General Topics

Panorama AWS Plugin details?

Sec101 — Mon, 06 Feb 2023 22:00:16 GMT

Anyone have some good info/links as to what exactly the Panorama Plugin for AWS does? I've read a bit about it's attempt to automate, and monitor, but is there a good document that lays out exactly what this plugin does, and how you can use it to build out AWS?

Re: Panorama AWS Plugin details?

kiwi — Wed, 08 Feb 2023 09:15:26 GMT

Hi @Sec101 ,

With the AWS plugin on Panorama and API you can synchronously update Security policy on your firewalls. Panorama can then also collect a predefined set of attributes as tags for your AWS resources and register the information to your firewalls. When you reference these tags in Dynamic Address Groups and match against them in Security policy rules, you can consistently enforce policy across all assets deployed within your AWS accounts.

Use Case: Use Dynamic Address Groups to Secure New EC2 Instances within the VPC

A complete deployment guide can be found here:
Set Up the AWS Plugin for VM Monitoring on Panorama

A complete list of attributes monitored can be found here:

List of Attributes Monitored on the AWS VPC

Kind regards,

-Kiwi.

Re: Panorama AWS Plugin details?

Sec101 — Wed, 08 Feb 2023 18:32:31 GMT

Is there anythign in that plugin that will allow you to deploy VPCs, or is this only used for tagging purposes?