AWS Transit VPC -VPN with PA VM-300

[Krishnasg]

Hi,

Did anyone built Transit VPC Deployment using Palo Alto VM-300 series firewall?

We are planning to provision 1XVM-300 firewall appliance in each AZ of transit VPC. However I am concerned about number of VPN tunnels each device can handle? Are there any VPN limitatons with PA VM-300 running on AWS ?

Thanks,

[hshah · Accepted solution]

Please refer to the following document. Its 2000 for PAN-Os 8.0.x. I think AWS has some limitation on how may route it can learn over IPsec. In that case, you may want to advertise just default route from PANW firewall.

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/virtualization-features/vm...

[Krishnasg]

that helps.

Thanks for the quick response.