Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Can you create two virtual firewalls inside one physical PA-200?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Can you create two virtual firewalls inside one physical PA-200?

L1 Bithead

I am wondering if you can create two virtual firewalls inside one physical PA-200 box?

If this is possible I would like two physical ports to be allocated to each virtual firewall.  One virtual firewall and its set of ports will be for a production network and the other virtual firewall and ports will be used for a visitor network.  I am trying to figure out a solution to avoid having to use two separate PA-200 boxes.  I have one solution which is the visitor traffic flow over the same vpn interface as the production traffic, which I want to avoid.

2 REPLIES 2

L5 Sessionator

VSys are not supported on PA 200 and PA 500

L4 Transporter

As commented before VSYS are not supported, but you can create 2 virtual routers  and assign two ports to each one. The networks will be segregated between the virtual routers (unless you create inter-VR routes). The only downside is that the security policies will be in the same rulebase but you can create two tags: production and visitors and assign the corresponding one to each policy to help you with the management. 

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/Understanding-Virtual-Router-and-Virtual...

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Tag-and-Filter-Security-Policy-Ru...

https://live.paloaltonetworks.com/t5/Community-Blog/Organize-Your-Rulebase-with-Color-Coded-Tags/ba-...

 

Regards, 

Gerardo

  • 2291 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!