topic Re: Connect pan-vm firewalls to on premise Panorama? in General Topics

Connect pan-vm firewalls to on premise Panorama?

tejasmapuskar — Fri, 20 Nov 2020 04:57:12 GMT

We have virtual Palo firewalls in AWS VPC behind the AWS internet gateway. We are looking to register them to the on-prem panorama.

Re: Connect pan-vm firewalls to on premise Panorama?

JoergSchuetter — Fri, 20 Nov 2020 06:23:59 GMT

Hello @tejasmapuskar

You need to make your panorama available via the Internet, filter access very tight. Now you need to grant the public IPs of your firewalls management interface to have access to panorama.

The firewalls on cloud need to be told to communicate with the public IP of panorama.

Re: Connect pan-vm firewalls to on premise Panorama?

tejasmapuskar — Fri, 20 Nov 2020 15:17:18 GMT

Hi,

I am going to give it a try. Which ports does panorama need to communicate with the firewalls apart from TCP- 3978 and TCP 28443 ?

Re: Connect pan-vm firewalls to on premise Panorama?

BPry — Fri, 20 Nov 2020 19:52:08 GMT

@tejasmapuskar

That's the only two ports you should need from the VM series to your Panorama instance.