VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
About VM-Series in the Public Cloud

Welcome to the VM-Series in the Public Cloud discussion forum! This community exists as a resource for you to discuss VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and Alibaba. We encourage you to engage in this rapidly growing community to share ideas, pose questions, and propose real-world solutions to any challenges that may arise.

Disclaimer:
This forum is provided for Live Community members to discuss and share information pertaining to the VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform Oracle Cloud and Alibaba. Please use the information from this forum at your own risk and make sure to test and verify proposed solutions presented here. For information on contacting Palo Alto Networks support, click here.

Discussions

Welcome to the VM-Series in the Public Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 3734 Views
  • 0 replies
  • 0 Likes

Resolved! East-west traffic within azure single Vnet

Regarding East-west traffic within azure single Vnet, in this Guide page 127 states "Azure networking does not require the use of source NAT on the firewall to enforcesymmetry if both directions of the flow pass through the same Azure internal loadbalancerfront-end IP and backend pool. The private subnets have UDRs directing East/West traffic to...

Sklearn on aws lambda

I want to use sklearn on AWS lambda. sklearn has dependencies on scipy(173MB) and numpy(75MB). The combined size of all these packages exceeds AWS Lambda disk space limit of 256 MB.How can I use AWS lambda to use sklearn?

Configure Site-to-Site IPsec VPN b/w Palo Alto Device hosted in Azure cloud and Cisco Router on Premise

Hello Everyone,I wish you all a good start to the week. Just wanted to know if someone here has already configured Site-to-Site IPsec VPN b/w Palo Alto Device hosted in Azure cloud and cisco router or cisco ASA firewall on-premise? Is there any proper documentation to do so?Or any existing thread? Your input would be much appreciated. Thank You

MDWaqas by • L0 Member
  • 5041 Views
  • 3 replies
  • 0 Likes

Resolved! Server Profile LDAP

Hi There, I am quite newbie to PA. I have deployed VM series firewall in Azure public cloud from Market place,But It appears to me in server profiles there is a lock symbol. Basically i try to configure LDAP for PAFW authentication. I had setup everything but its not working, Is that any license require? What that lock means.

Ramakrishnan_0-1643368460278.png

Resolved! vm-series on azure - failing to start

Anyone have luck deploying a standard vm-series in Azure lately? Hitting the mgmt interface with a web browser will sometimes (most of the time it doesn't respond) display the following: "ATTENTION A critical error has been detected, preventing proper boot up of the device..." Have tried multiple times to get this to deploy on bundle 2 and keep ...

Resolved! VM-300 Product azure sizing

Have a couple of VM-300 series VMs in azure that are running at an incorrect sizing. Looking at resizing but was wondering if since the VM-300 Series only supports 4VCPU are the additional VCPUs not used? Typically per documentation VM-300 Series are sized at a D3 in AzureWe have firewalls in the VM-300 series sized at a D5v2 so way more resour...

Resolved! HA Missing Operational Commands Tab

Hi, I have setup 2 VM series FW in Azure in HA, however in the HA section there's no Operational Commands tab to go in and issue a suspend so it can failover to the secondary FW. I know in CLI you can put in a command to do this, but I'm interested to see if there is a fix for this.I'm running PAN-OS 10.0.6. Thanks

Dynam0 by • L1 Bithead
  • 5207 Views
  • 2 replies
  • 0 Likes

EVE-NG PA booting issue

Hi all, I have a eve-ng laptop that i'm planning to use for practice. I have installed the KVM file and activated it as well as added it to the eve-ng lab. However, when i start the device. I get the error message "No bootable Device". This device is currently configured to use PA8.0.5 in the EVE-NG environment. I have Attached a screenshot of ...

Jumbo Frames

Hi,I need small information on Jumbo Frames. If I disable the Jumbo Frames in PA-VM (VM-300) in device --- Setup --- session, will it be there any traffic impact or will firewall reboot.?please suggest me on this,.Thank you,

Azure HA Failover not working

Hello, We have a pair of VM300 PAs in Azure set up in Active-Passive. They are running 9.0.7 code with VM Series plug in 1.0.8. There was an issue in Azure on 19/10/20 which caused a failover and recovery (we use pre-emption). Post this issue the PAs were up and running but not passing traffic. we found that the secondary IP addresses (i.e. ...

Resolved! Azure multiple VM-series with UDR and Load balancers

Hello, At this moment I am doing a PoC for a client in Azure with two VM-300 in the so called "Sandwich" mode. So for traffic coming from the internet I have the following path: ELB > VM-300 (x2) > ILB > Webserver (x2). Both VM-300 and Webservers are both in a seperate availabilty set. I managed to load balance the traffic from the int...

Knipsel.PNG

AWS interface limits

Is the AWS VM limited to only 3 interfaces or can we add 3 more? I was reading there may be limitations associated with machine type but wanted to be sure before we went down the path of changing that.

Resolved! Azure Palo Alto VM to campus network via ExpressRoute

Quick question for the community. I have setup and configured the Palo Alto VM series in Azure. Along with the management interface, the VM has “trust” and “untrust” interfaces. I have basically copied the rules over from our office Palo Alto devices, and my test VM is working great through the Palo Alto VM. However, I’m having a problem that I ...

  • 535 Posts
  • 107 Subscriptions
Top Liked Authors
Labels