This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About tchark
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About tchark
02-04-2021
5Posts
0Likes
0Solutions
Feb 04, 2021Last Visited
User
Activity
User
Profile
Latest posts by tchark
| Subject | Views | Posted |
|---|---|---|
| 1698 | 06-28-2018 04:10 AM | |
| 10250 | 06-12-2018 07:26 AM | |
| 10313 | 06-12-2018 06:30 AM | |
| 3115 | 04-25-2018 04:37 AM | |
| 3140 | 04-24-2018 09:10 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 04-24-2018 09:02 AM |
| Date Last Visited | 02-04-2021 01:04 PM |
| Posts | 5 |
06-28-2018
04:10 AM
Hi All, we currently have a vm300 firewall acting as our security perimeter device in azure. I have setup the high availability using a standard microsoft internal load balancer for HA, but im finding that my bandwidth is halved when accessing azure VMs through the firewall. when i remove the firewalls from the environment, i get above 500Mbps when testing with iperf, but when i reintroduce the firewalls and test using iperf, im finding i get less than 250Mbps. Is there some additional feature in the palo altos that is slowing things down? i have purchased the bundle 1 PAYG option within azure meaning we dont have URL filtering or global protect, and the firewall is configured with only basic policies, so cant see why it would be causing this slowdown. Any assistance is greatly appreciated. thanks guys, Taib.
... View more
06-12-2018
07:26 AM
awesome!! many thanks for this, im going to give this a go and report back how i get on. hopefully i can take the lessons learned from this and move it to my live environment. thanks again for this.
... View more
06-12-2018
06:30 AM
I am trying to deploy a front end load balancer, 2 x VM-300 azure firewall in the middle and a back end load balancer. I am having trouble with configuring the UDR (routing) to allow access from the Azure subnets out to the internet and vice versa. The internal load balancer is doing HA load balancing for the firewalls and in the firewall logs I can see traffic on the for the various subnet traffic. I have static routes in place on the azure VM-300 firewall directing traffic from RFC1918 back to the internal load balancer address and this is working. But im not sure if I need a static default route on the palo altos to direct traffic to the front end load balancer or to the internet directly. Or how does the routing work for Internet to our internal networks (DMZ specifically) if we are going via a public load balancer. Do i need an Application gateway in azure? as this will only load balance for HTTP or HTTPS Any help is greatly appreciated.
... View more
04-25-2018
04:37 AM
Hi Niyengar, thanks for the update, thats great news that the VMs are included in the bundle, but i was confused as to why Palo Alto gave sizing info for virtual machines, or is that for virtual firewalls that are not bought as part of an azure subscription. Does Azure then choose the size of the virtual machine when we purchase the VM-300 and bundle option? Regarding the HA query, i did see that there was no HA for PAN-OS on azure, so how would i achieve resiliency to ensure that if one firewall fails (or needs rebooting) that i can continue to have security enforced through the palo alto firewalls, are you saying that there is no clustering or active/standby setup for palo altos in azure? I am going to be using a load balancer that sits in front of the firewalls, but need to ensure resiliency in the event of failure of one of the firewalls. many thanks for your assistance, really appreciate it Taib.
... View more
04-24-2018
09:10 AM
Hi All, im trying to spec up a resilient HA solution for the VM-300 series PAYG bundle 1 option within azure, and just need the following clarified:- - if i were to purchase the VM-300 option 1 bundle (https://azuremarketplace.microsoft.com/en-us/marketplace/apps/paloaltonetworks.vmseries-ngfw?tab=PlansAndPrice) does this mean i also need to purchase virtual machines for them to run on within azure, or does the bundle include VMs to run on -if i need to purchase VMs should i go for the linux standard VM builds, or memory optimised, or CPU optimised - regarding HA and resiliency, will i need to purchase 2 x VM-300 firewalls with option 1 bundle in order to provide HA i.e. in the event one VM-300 fails or needs restarting i need a way to ensure traffic keeps flowing, im getting confused as it appears there is some option for Availability sets within Azure that perform some similar function? or is it that i would have to purchase 2 VM-300s and place them in this availability set to achieve this. I think i've gone a bit documentation blind, and just need a bit of a steer. many thanks Taib.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-04-2021
01:04 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks