This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Cdchamberlin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Cdchamberlin
07-05-2020
14Posts
0Likes
0Solutions
Jul 05, 2020Last Visited
User
Activity
User
Profile
Latest posts by Cdchamberlin
| Subject | Views | Posted |
|---|---|---|
| 8058 | 03-10-2020 01:08 PM | |
| 5003 | 08-18-2019 03:00 PM | |
| 5089 | 08-17-2019 09:09 PM | |
| 2898 | 08-02-2019 10:53 AM | |
| 2291 | 07-31-2019 09:34 AM | |
| 5029 | 07-31-2019 08:56 AM | |
| 4193 | 07-17-2019 02:54 PM | |
| 4213 | 07-17-2019 02:21 PM | |
| 1797 | 03-29-2019 07:30 AM | |
| 1777 | 03-28-2019 05:18 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-09-2019 05:38 PM |
| Date Last Visited | 07-05-2020 01:30 PM |
| Posts | 14 |
03-10-2020
01:08 PM
Hi @DewhirstR , Hope all is well and you get this worked out. Take a look at page 13-15 and verify the VPC attachments for both spokes to the TGW. Verify Associations in the TGW Route Table for the VPCs.
... View more
08-18-2019
03:00 PM
I apologize for asking stupid questions. . Looking at the templates, there are many and it appears most - if not all would work. I guess I'm looking for direct guidance on the approach to take. The two firewalls I have are being load balanced under an NLB. One firewall is in AZA and another in AZB. I can export the xml configuration.. With that, what template should I dig into that you suggest? I just want an ASG in each AZ. Thanks again.
... View more
08-17-2019
09:09 PM
For my EC2 instances (App Server), I just created Launch Template/ASG. Can I do the same thing with the VM-Series FWs? Capture an AMI, create a Launch Template and ASG? Here is my situation, I have two firewalls that I manually built under an NLB. I would like to replace those with an ASG. Any advice would be super appreciated. Thank you,
... View more
08-02-2019
10:53 AM
Working on a POC. Have two firewalls sitting under an NLB. One of the firewalls routes traffic to database. This appears to be a limitation on the VPC route tables. With traffic from App server destined for the DB, it goes through AZA palo alto. What advice do you have if this firewall dies? Anyone else experience the limitation with having to route to a specific ENI?
... View more
- Tags:
- active active
- aws
- nlb
07-31-2019
09:34 AM
Up top, have an eBGP peering with ISP. Trusted Zone > L2 Links down to Nexus > then Juniper ToR switches aggregating servers The firewall will perform L3 and contain the VLANs. How would you go about the connections from Palo > Nexus > Juniper
... View more
07-31-2019
08:56 AM
two firewalls behind an NLB. what approach would you take to spin up additional firewalls if a certain threshold is hit (what threshold would you trigger on)? i've looked at the templates provided by palo alto but this would be adding additional firewalls in already established VPCs. also use panorama
... View more
07-17-2019
02:54 PM
Do you suggest that I work on using Ansible? I want to automate our firewall changes. Can you give me a brief rundown of an example workflow that you or someone else has created for firewall changes? Hoping that I'll have an idea of what to work toward.. Right now, it's trying to mess with Postman.
... View more
07-17-2019
02:21 PM
I have Panorama managing my firewalls. I would like to leverage Postman to make API POSTS to Panorama for new security policies. Can someone provide an example of a filled-out body with bogus data to show me how the API wants it? I'm particularily getting stuck on the first part of the body.. I have a device group called "firewalls" and the device is named "firewall1" { "entry": { "@name": "testrule", "target": { "devices": { "entry": [ null ] },
... View more
03-29-2019
07:30 AM
The health check failure states 'Request Timed Out'. For NAT policies on the FW, I use Address Objects and map the FQDN of the ALBs. I can succesfully resolve the FQDN of the ALB which points to the Palo Altos, but I cannot resolve the ALB for the App Servers from the Palo Alto. They are in different VPCs. ALB Palo1 Palo2 = Can resolve from FW ALB App1 App2 = Can't resolve from FW I think it has something to do with the Palo not being able to resolve the FQDN of the ALB positioned 'lower' in the stack sitting above the App Servers.
... View more
03-28-2019
05:18 PM
Trying to get the Palo Altos to register as healthy. Can anyone provide some assistance on NAT policies, or configurations for getting TCP 80 checks from ALB to Palo Altos to ALB which sits in front of two App servers? ALB (Palo Altos) | Palo Altos | ALB (App Servers) | App Servers
... View more
03-11-2019
01:13 PM
Push.
... View more
03-11-2019
01:11 PM
Hi @jperry1 , My concern with this design is the VPC attachment from TGW SN to the TGW. Rather than using ECMP VPN links 'that I have been unable to find documentation on', the data sent across that connection will be in the clear; right? What are your thoughts on that?
... View more
03-09-2019
06:10 PM
Hi @jmeurer Any updates on the documentation? I'm interested in securing traffic flowing Inbound, East/West and Outbound with VPC insertion and VPN insertion. Particulary interested in taking advantage of ECMP VPN to connect the VM_SERIES to the TG. Any documentation would be greatly appreciated. Thank you.
... View more
03-09-2019
05:45 PM
I'm looking at taking advantage of ECMP VPN to attach VM-SERIES to the Transit Gateway. I would like to use tunnel interfaces for this and would like egress/ingress traffic to go through the VM-SERIES appliances. Can somone that has implemented this design provide some feedback, steps and things to keep in mind? Thank you,
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks