10-29-2019 08:06 AM
Hello Community,
I need help on this topic :
How can I configure PBF to route VPN flow to AWS on PaloAlto Firewall?
Thank you for help !
10-30-2019 01:53 AM
@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to.
10-29-2019 09:11 AM
Is there a specific reason you need to use PBF? AWS provides a detailed template on using BGP with VPN connections to PAs.
10-29-2019 10:00 AM
Hello,
Thank you for your reply
Are you talking about this topic : https://docs.aws.amazon.com/vpc/latest/adminguide/palo-alto.html
?
We would like to make it work with PBF
Thks!
10-29-2019 01:03 PM
Yes, that's the basis of it. The addresses and variables in that link won't be correct for your implementation. The AWS portal will provide the configuration specific to your environment.
10-30-2019 01:02 AM
...so,why PBF will not work with this implementation?
Thks
10-30-2019 01:53 AM
@Stephen24 Because this is the only supported by AWS setup. . You can possibly use PBF on the PA end to send traffic to one of the VPN tunnels, but without BGP, there will be no way for the AWS VPN gateways to know which of the tunnel to send the traffic to.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
