Panorama and VMs in Google Cloud (GCP) : VM information sources

[giovanni.augusto]

Hi Everyone,

I am testing 8.x and 9.x VM series NGFW in Google Cloud Platform and I am testing integration into Google SDN fabric.

I successfully created a VM information source feed and some Dynamic address Groups using GCP fabric filters (network tags, hostname, etc)

I noticed that the information retrieved from the fabric is only related to the zone I have set the VM information source feed, this means I have to create a VM information source feed for every zone where my instances are...globally, this is indeed a limitation considering each FW can only feed from 10 VM information sources max, so 10 zones and no more.

Do you know if using Panorama makes it possible to achieve the same without either the limitation of the zone and more than 10 VM information sources?

Thanks

[kiwi · Accepted solution]

Hi @giovanni.augusto ,

Yes, information sources can also be pushed using Panorama templates. 

However as far as I know it will not remove any of the current limitations. 

You can configure up to ten VM information sources on each virtual system on a firewall capable of multiple virtual systems.

I'd check with support if there's another workaround for this ... or reach out to your SE to have a feature request to increase the number of information sources.

Cheers !

-Kiwi.

[giovanni.augusto]

Thank you,

I opened a case, as soon as I will get a reply I will update here as well