This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Anything more recent for deploying into an existing setup? It's frustrating that at this point you can't specify an availability zone via the marketplace deployment.
... View more
To egress the internet from your 'public' interface, you'll need to put it into a Public AWS subnet. For this subnet in the aws route tables you'll route 0.0.0.0 to the Internet Gateway (IGW). Also set an EIP on your Eth1/2 ip address. The IGW does the nat translation as it leaves to the internet.
... View more
Have a case where i want to re-write the source-IP and destination-port on traffic heading to the internet. So coming in from the private network as 10.1.1.1 -> 2.2.2.2:4000 and changing as it leaves to the internet to 3.3.3.3 -> 2.2.2.2:443. The part i'm struggling with is preserving the original destination IP. For the NAT policy rule, on the translated packet under Destination Address Translation, I cannot find an option to use the original destination address. It requires that I specify a translated Address. Is it possible to just preserve the original or am i missing something.
... View more
Does anyone have experience with a services/transit VPC at AWS? Wondering specifically about experience with thoughput with the palo alto managing the transit traffic between the corporate office and multiple VPC's.
... View more