Multi-VPC Deployment: Can it be done with AWS Firewall Manager?

[Lachlh01]

Hey Everyone,

I just watched the MultiVPC demo video and wanted to know.

https://live.paloaltonetworks.com/t5/cloud-ngfw-videos/multi-vpc-cloud-ngfw-resource/ta-p/523967

Is this configuration expected to be done in a AWS Firewall managed Associated state or Disassociated state?

As from what I can see from my testing; if your associated you can't in the cloudngfwaas portal add an extra AWS account there to do multi-account-multi-vpc deployment. As the firewall manager only supports a security policy for a centralised or decentralised deployment.

Is the a link to specific documentation or guidance on with this new model of deployment on how to onboard additional accounts?

Thanks!

[mjanardanfar]

Hello Lachlh01,

I saw your post and have a few recommendations for you. 
 

These articles could be useful to you-

https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-and-e...

https://www.paloaltonetworks.com/blog/network-security/cloud-ngfw-across-multiple-aws-vpcs/

 If you have any further problems, please respond to this post.

Regards,
Mayurkumar Farkade
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/configuration-discussions/ct-p/Configuration-Discussions

*Don’t forget to accept the solution provided!

[Lachlh01]

Hey @mjanardanfar ,

Thanks for the links. Is the MultiVPC configuration expected to be done with AWS Firewall Manager or not?

Thanks in advance!

[mjanardanfar · Accepted solution]

Hello Lachlh01,

It's currently supported with Cloud NGFW console.

Regards,
Mayurkumar Farkade
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/configuration-discussions/ct-p/Configuration-Discussions

*Don’t forget to accept the solution provided!

[Lachlh01]

Hey @mjanardanfar, Thanks for the reply back!

Is there plans to intergrate within the AWS Firewall Manager?

I'm just trying to think of a scenario where you could have the requirement for both a AWS Firewall Managed Policy via the AWS organizations and than a standalone setup for for the multiVPC setup.