https://live.paloaltonetworks.com/t5/general-topics/fortigate-vip-equivalent/m-p/430467#M95014 <P>Hello and welcome!,</P><P>So the VIP IP would just be the public IP address for you inbound/outbound NAT. Take a look at the link, might help you out.</P><P>&nbsp;</P><P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC</A></P><P>&nbsp;</P><P>Cheers!</P> Tue, 31 Aug 2021 15:07:30 GMT OtakarKlier 2021-08-31T15:07:30Z https://live.paloaltonetworks.com/t5/general-topics/fortigate-vip-equivalent/m-p/430434#M95013 <P>Hello,</P><P>&nbsp;</P><P>I am working on a Fortigate to PA migration and I am trying to wrap my head around the equivalent of a Fortigate VIP (we used VIPs to go from public IPs to inside web servers) on a PA. Would I just create addresses for everything and then do the "virtual" piece with a NAT policy?</P><P>Thanks for any input,</P><P>MJF</P> Tue, 31 Aug 2021 14:19:11 GMT https://live.paloaltonetworks.com/t5/general-topics/fortigate-vip-equivalent/m-p/430434#M95013 MFacella1 2021-08-31T14:19:11Z https://live.paloaltonetworks.com/t5/general-topics/fortigate-vip-equivalent/m-p/430467#M95014 <P>Hello and welcome!,</P><P>So the VIP IP would just be the public IP address for you inbound/outbound NAT. Take a look at the link, might help you out.</P><P>&nbsp;</P><P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CllzCAC</A></P><P>&nbsp;</P><P>Cheers!</P> Tue, 31 Aug 2021 15:07:30 GMT https://live.paloaltonetworks.com/t5/general-topics/fortigate-vip-equivalent/m-p/430467#M95014 OtakarKlier 2021-08-31T15:07:30Z