topic Re: POC in AWS - Palo Alto Active/Active under NLB in General Topics

POC in AWS - Palo Alto Active/Active under NLB

Cdchamberlin — Fri, 02 Aug 2019 17:53:42 GMT

Working on a POC.

Have two firewalls sitting under an NLB. One of the firewalls routes traffic to database. This appears to be a limitation on the VPC route tables.

With traffic from App server destined for the DB, it goes through AZA palo alto.

What advice do you have if this firewall dies?

Anyone else experience the limitation with having to route to a specific ENI?

OtakarKlier — Fri, 02 Aug 2019 21:02:53 GMT

Hello,

The routes need to be there for both PAN's and destinations.

Cheers!

MUmanath — Sun, 04 Aug 2019 15:49:11 GMT

Please use bop routing protocol to have reducancy between two firewalls