Connect pan-vm firewalls to on premise Panorama?

[tejasmapuskar]

We have virtual Palo firewalls in AWS VPC behind the AWS internet gateway. We are looking to register them to the on-prem panorama.

[JoergSchuetter]

Hello @tejasmapuskar 

You need to make your panorama available via the Internet, filter access very tight. Now you need to grant the public IPs of your firewalls management interface to have access to panorama.

The firewalls on cloud need to be told to communicate with the public IP of panorama.

[tejasmapuskar]

Hi, 

I am going to give it a try. Which ports does panorama need to communicate with the firewalls apart from TCP- 3978 and TCP 28443 ?

[BPry]

@tejasmapuskar 

That's the only two ports you should need from the VM series to your Panorama instance.