topic Re: CentOS 7.4 Compatibility with VM-Firewals? in General Topics

CentOS 7.4 Compatibility with VM-Firewals?

baron1234 — Mon, 30 Oct 2017 14:15:08 GMT

Hello good morning, someone has tested the vm series firewall, with the latest version of CentOS 7.4.

Is there a problem or incompatibility?

Thanks

Re: CentOS 7.4 Compatibility with VM-Firewals?

reaper — Mon, 30 Oct 2017 14:29:02 GMT

In which way do you mean 'compatible' ?

you'll need to run VMWare ESXi/NSX, Citrix SDX, Hyper-V or KVM as a virtualization layer before you can deploy a firewall

https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series

Re: CentOS 7.4 Compatibility with VM-Firewals?

baron1234 — Mon, 30 Oct 2017 14:37:32 GMT

Hello, in my case, I would use KVM.

I have seen on the web, that the support of the vm series firewall, using the software version 8.0. Work with CentosOS 7.2.

But I don't know if version 7.4 could cause any problems, from the virtual firewall running on KVM.
Thank you

Re: CentOS 7.4 Compatibility with VM-Firewals?

Retired Member — Wed, 22 Nov 2017 16:04:37 GMT

@reaper
Section VM‐Series on KVM— Requirements and Prerequisites in VM-Series 8.0 Deployment Guide states:
CentOS/RedHat Enterprise Linux: 7.2 (QEMU‐KVM 1.5.3 and libvirt 2.0.0)
as Software Versions Requirements. So the question is about compatibility with higher versions of QEMU‐KVM and libvirt.
CentOS 7.4 comes with libvirt-3.2.0-14.el7.x86_64.rpm package in OS repository.
Weird that CentOS 7.2 comes with libvirt-1.2.17-13.el7.x86_64.rpm package in OS repository and libvirt-1.2.17-13.el7_2.2.x86_64.rpm in Updates repository. I do not how to achive exactly the libvirt 2.0.0 version.
@baron1234

It seems that product documentation is lacking clear requirements. I will try to run PA-VM in KVM on CentOS 7.4.

Re: CentOS 7.4 Compatibility with VM-Firewals?

Retired Member — Thu, 21 Dec 2017 22:51:52 GMT

@baron1234

I have successfully setup PA-VM (PAN-OS 8.0.6-h3) on freshly updated CentOS 7.4 with KVM installed on Supermicro SuperServer 5018D-FN8T. Tested passing traffic through the I210-based and I350-based interfaces, in bridge, PCI Passthrough, SR-IOV (only I350).

However the SoC 10 GbE (X552) interfaces were not recognized. Started working with PANW TAC on this issue.