VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
About VM-Series in the Public Cloud

Welcome to the VM-Series in the Public Cloud discussion forum! This community exists as a resource for you to discuss VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and Alibaba. We encourage you to engage in this rapidly growing community to share ideas, pose questions, and propose real-world solutions to any challenges that may arise.

Disclaimer:
This forum is provided for Live Community members to discuss and share information pertaining to the VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform Oracle Cloud and Alibaba. Please use the information from this forum at your own risk and make sure to test and verify proposed solutions presented here. For information on contacting Palo Alto Networks support, click here.

Discussions

Welcome to the VM-Series in the Public Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 3740 Views
  • 0 replies
  • 0 Likes

AWS VM-100 (2 VCPU limit) on M4/M5.xlarge (4 VCPU onboard) - wasted VCPU?

Hello Experts, Please help to understand what happens when one runs AWS VM-100 (2 VCPU limit) on M4.xlarge or M5.xlarge (4 VCPU onboard).It works fine. But it seems like two of four VCPUs are staying idle in such setup. Would you agree?I tried to use CloudWatch to see core specific CPU utilization, it is only display overall stats and does not s...

SergGur_0-1599826668014.png
SergGur_1-1599826668018.png
SergGur_2-1599826668020.png
SergGur_3-1599826668025.png
SergGur by • L2 Linker
  • 12519 Views
  • 7 replies
  • 1 Likes

Resolved! Panorama HA (Active/Standby) Deployment in Azure

Hello Our company has opted to deploy Panorama and Palo Alto Firewalls in our Azure. I am planning to deploy Panorama in HA (Active/Standby) in Panorama mode in our Azure. I have some questions and hoping you guys can help me I am using the below System Requirements System Disk: 1 x 256 GB (Premium SSD)CPU’s: 16Memory: 64 GBLogging Disks: 2TBA...

I cannot login to panorama in azure after downgrade from version 10.0 to 9.1.5.

HelloI deployed the panorama(version10.0) in my azure environment.After setting up, I realized that I must downgrade to version 9.1.5 due to several reasons.Therefore I tried downgrade with this manual site( https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/troubleshooting/downgrade-from-panorama-10-0.html )It seems panorama is down...

Routing the return traffic for on Prem network through Expressroute

We have 2 Palo alto firewalls in Azure using the so called 'load balancer sandwich.' In addition we have a Microsoft ExpressRoute for connectivity to our on prem network. Currently our Expressroute traffic goes around the Palos but the intent is to have the expressroute traffic also go through the Palos. So if I create a UDR for one of the...

Resolved! Panorama in Azure is not detecting the attached logging disks

Hello I deployed Panorama in Azure. I attached a 2TB data disk as a logging disk for the Panorama VM but when I go to Panorama CLI and run the command "show system disk details" it says "No Disks available". I found the below article in the knowledge base and tried the resolution 2 but it's still the same. Does anyone know how can I fix this pro...

PA VM - Active/Passive on Azure availability set

I have few firewalls in active/Passive HA and few more to built. I'm not using Loadbalancer / App gateway to load blance traffic between firewalls. Can I use availability set and place the HA members on respective fault and update domain. ex FW1 Update domain :0 Fault domain: 0 FW2 Update domain :1 Fault domain: 1Couldn't find any docum...

AWS Transit VPC CloudFormation

Can anyone assist with this CF Template? https://github.com/PaloAltoNetworks/aws-transit-vpcIt is outdated, and I can't figure out why it's getting hung up. First the AMI was old, so I updated that to 9.1, now it's created one PA in the transit VPC, but I can't login (password is wrong) so I'm guessing the bootstrap config (which I am just using...

PA firewall traffic to AWS API gateway

Planning to secure AWS infra using a VM firewall Palo Alto. Main AWS components are API Gateway & Lambda.Traffic from external network (public) comes to API gateway and to lambda. Is it possible to route incoming traffic via PA firewall to API gateway.

GlobalProtect --- Use machine certificate or a user certificate (without specifying Username Field)

Hi, I'm busy setting up GlobalProtect for a client, and already have LDAP authentication working. However the client requires a second factor for the authentication and went with certificates because they have an internal PKI. I've been trying to configure this to use machine certificates, so that only corporate machines would have access. I've ...

Want to use on-prem AD server to authenticate users on VM Series in Azure

I have a VM series firewall deployed in Azure with a VPN connection to my on-prem PA firewall. I have GP working on the VM firewall via local user database but I am unable to get the VM firewall to utilize my on-prem AD server to authenticate users. I have tried adjusting the service route but this does not work for dynamic-DHCP interfaces. H...

Express Route connection Palo Alto VM Firewall in Azure

Hello All Our Company has opted to deploy Palo Alto Firewall (VM 500 Series) in our Azure environment. One of my requirements is to establish connection between this Palo Alto Firewall and the Express Route Gateway in Azure. I would like to know if anyone here is able to setup this? if so, can you please tell me how to do so?

  • 536 Posts
  • 107 Subscriptions
Top Liked Authors
Labels