Hey all, It has finally happened and we ran out of IPv4 space on Primary CIDR block for our VPC. We created a new CIDR and associated it to the same VPC. However it appears that I can't associate an ENI in the new CIDR to our Palo Alto in the original CIDR. And we can't use the NAT ENI in the original because it hops to the original then out which AWS doesn't allow. Has anyone tried this, or aware of how to work around this issue? Thanks, Chad
... View more
Hey all, I'm attempting to use the GuardDuty integration that's on github here: https://github.com/PaloAltoNetworks/pan_guard_duty I've gone through all of the steps but I get an error local and in lambda of: python lambda_fw_config.py<test_event.json [Lambda handler]Received event: null Traceback (most recent call last): File "lambda_fw_config.py", line 341, in <module> lambda_handler(None, None) File "lambda_fw_config.py", line 319, in lambda_handler fw_ip = os.environ['10.0.0.6'] NameError: global name 'os' is not defined I see that pandevice and pan-python are installed: pip install pandevice -t . Collecting pandevice Collecting pan-python (from pandevice) Installing collected packages: pan-python, pandevice Successfully installed pan-python-0.13.0 pandevice-0.6.3 Target directory /home/xponent/code/python/pan_guard/pan already exists. Specify --upgrade to force replacement. Target directory /home/xponent/code/python/pan_guard/pan_python-0.13.0.dist-info already exists. Specify --upgrade to force replacement. Not sure what I'm missing, there is no os in pandevice to import. Ideas? Thanks!
... View more