AWS VM-Series Virtual Bundle1 Health Check issue with Gateway Load Balancer

[KimSiah]

I am following the video https://www.youtube.com/watch?v=c28ZwlhCIWE

to implement a Centralized design using Bundle1. However, I am getting health check issue for the GWLB.

I capture packets on the firewall and can see packet from the GWLB (10.100.0.94) to the FW (10.100.0.89). but no response.

Target group always time out to get a response. 

I have the src/dest check on the 2 ENI of the firewall instance disabled.

The health check is TCP on port 80. I have tried http to "/unauth/php/health.ph" as well

I have a profile while allow http https attached to the Eth1/1

Please advise. Thanks.

KimS

[KimSiah · Accepted solution]

Found the problem. Missing a security zone setting for the Eth1/1. seem like the video didnt mention that.