About Mitesh_Nandu

Mitesh_Nandu · ‎12-29-2025

Hi, We have deployed VM-Series NGFW in GCP in sandwitch architecture (attached architecture diagram). Customer having On-Premises Panorama, which they want to integrate with VM-Series NGFW, between On-Premises & GCP IPsec Tunnel is configured. based on architecture how we can connect VM-Series NGFW with Panorama.

Mitesh_Nandu · ‎12-07-2025

Hi, How we can deploy Global Protect on Google Cloud Platform? In GCP we have deploy VM-Series Firewall in Sandwich architecture, now we want to configure Global Protect can yoy suggest best pratice for the same.

Mitesh_Nandu · ‎08-06-2025

Hello, We are currently using PA-3420 appliance & we have configured DOS Policy with default values, which is as below: Action Current Value Alarm Rate 10000 Activate Rate 10000 Max Rate 40000 Block Duration (Sec) 300 We have feteched last 30days connection per second report & as per the report max connection is 5000. how we can finetune value in dos profile?

Mitesh_Nandu · ‎06-22-2025

@BPry Thanks for the valuable input. EDL limit for 3420 has been increased from 50000 to 150000. When we run the below command in appliance output was showing 150000, Palo Alto document is not updated. show system state | match max-edl

Mitesh_Nandu · ‎06-05-2025

Hello, We want to configure log redundancy. Below is our infra: 1. Two Locations, both locations is active. 2. In both locations having PA appliances in HA & Panorama VM in panorama mode. 3. Panorama HA is configured between both Panorama. Below is our requirement: How we can achieve log redundancy ? Location 1 PA NGFW logs 1st forward to same location LC (log collector) & than replicate to secondary LC which is in Location 2 & vice-versa.

Mitesh_Nandu · ‎06-05-2025

Thanks @mshekh & @reaper for reply.... Want to understand EDL working. In our environment we are having 3 custom edl url IP list, in each url IP list having 50000 IP entries. In this scenario what will happens ? Will PA only read custom list 1 & block all the IPs in that list or PA will read all the custom list & block any 50000 IPs.

Mitesh_Nandu · ‎06-05-2025

Thanks @mshekh & @reaper for reply.... Want to understand EDL working. In our environment we are having 3 custom edl url IP list, in each url IP list having 50000 IP entries. In this scenario what will happens ? Will PA only read custom list 1 & block all the IPs in that list or PA will read all the custom list & block any 50000 IPs.

Mitesh_Nandu · ‎05-29-2025

How we can increase the External Dynamic List (EDL) max IP limit ? For example: PA 3420 has 50,000 IP limit, how we can increase this limit in EDL ?

Mitesh_Nandu · ‎08-22-2024

Hi mmclimans, We have applied the setting which you have mentioned in the article, still we are unable to see the X-Forwarded-For IP entry in traffic logs. In our environment we have applied SSL certificate on External & Internal Application Load Balancers or in PA we are performing Inbound SSL Inspection. How we can resolve the issue ?

Mitesh_Nandu · ‎05-02-2024

Can anyone will verify the architecture, will this architecture work in AWS.

Mitesh_Nandu · ‎04-24-2024

Hello Everyone, Firstly let me give you the brief about our requirement, which is as follow:- 1. We are using 2 pairs of VM-Series NGFW. 2. We want to route inbound & outbound traffic via this 2 pairs of VM-Series NGFW. 3. For inbound traffic we are going to use Application Load Balancer & for outbound traffic we are going to use GWLB. 4. We are having Multiple VPCs, which will attach to transit vpc gateway. We want to understand the inbound & outbound traffic flow & Architecture based on above requirement.

Mitesh_Nandu · ‎01-03-2024

Hi Vsurresh, We are not using GWLB. For ingress traffic we are using Application Load Balancer & for egress traffic we are using Network Load Balancer.

Mitesh_Nandu · ‎01-03-2024

Thanks Aleksandar.Astardzhiev for the brief. In my environment in target group we have mentioned IP Address & also we have swapped the interface. As you mentioned if we are choosing IP address in target group no need to swap the interface (will try the same). While creating Interface management profile, in the permit IPs does we have to specify any IP addresses.

Mitesh_Nandu · ‎01-02-2024

Hi Team, We have deployed PA-VM in Sandwich architecture on AWS. During PA-VM deployment we swapped the management interface. In the application load balancer both PA-VM is showing Unhealthy. How we can make PA-VM Healthy in Application Load Balancer ?

Mitesh_Nandu · ‎10-10-2023

Hi Slawek, Respect you kindly check the below points in GCP:- 1. In Trust VPC have you configured default route pointing towards PA-VM Trust interface. 2. Ingress Firewall rule in GCP.

Member Since	‎06-06-2022 03:25 AM
Date Last Visited	‎02-14-2026 11:53 PM
Posts	32

Online Status	Offline
Date Last Visited	‎02-14-2026 11:53 PM

About Mitesh_Nandu

Connectivity with Panorama

Global Protect Deployment on GCP

Dos Policy Value Finetune

Re: EDL Limit

Log Collector Redundancy

Re: EDL Limit

Re: EDL Limit

EDL Limit

Re: Using XFF Headers with VM-Series on GCP

Re: AWS: Deployment in Sandwich

Connectivity with Panorama

Global Protect Deployment on GCP

Dos Policy Value Finetune

Re: EDL Limit

Log Collector Redundancy

Re: EDL Limit

Re: EDL Limit

EDL Limit

Re: Using XFF Headers with VM-Series on GCP

Re: AWS: Deployment in Sandwich

Traffic Flow on AWS

Re: AWS: Deployment in Sandwich

Re: AWS: Deployment in Sandwich

AWS: Deployment in Sandwich

Re: Basic rule creation in VM-300 in GCP

Unlock your full community experience!

About Mitesh_Nandu