VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
About VM-Series in the Public Cloud

Welcome to the VM-Series in the Public Cloud discussion forum! This community exists as a resource for you to discuss VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and Alibaba. We encourage you to engage in this rapidly growing community to share ideas, pose questions, and propose real-world solutions to any challenges that may arise.

Disclaimer:
This forum is provided for Live Community members to discuss and share information pertaining to the VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform Oracle Cloud and Alibaba. Please use the information from this forum at your own risk and make sure to test and verify proposed solutions presented here. For information on contacting Palo Alto Networks support, click here.

Discussions

Welcome to the VM-Series in the Public Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 3526 Views
  • 0 replies
  • 0 Likes

Want to use on-prem AD server to authenticate users on VM Series in Azure

I have a VM series firewall deployed in Azure with a VPN connection to my on-prem PA firewall. I have GP working on the VM firewall via local user database but I am unable to get the VM firewall to utilize my on-prem AD server to authenticate users. I have tried adjusting the service route but this does not work for dynamic-DHCP interfaces. H...

Express Route connection Palo Alto VM Firewall in Azure

Hello All Our Company has opted to deploy Palo Alto Firewall (VM 500 Series) in our Azure environment. One of my requirements is to establish connection between this Palo Alto Firewall and the Express Route Gateway in Azure. I would like to know if anyone here is able to setup this? if so, can you please tell me how to do so?

Azure NGFW active-active HA and Panorama requirements

Hi, we're currently evaluating the use of NGFW's for a new Azure deployment. Ideally, we need to deploy NGFW in an active-active HA pattern behind an Azure internal load balancer. The documentation appears to state that Panorama is required to support this configuration. Is this a hard requirement? Is it possible to enable active-active with Con...

Ultimate Test Drive (UTD) - Get “Hands On” With the VM-Series on AWS

As we continue with our efforts to improve and enhance the public cloud UTDs, a new version of AWS UTD focused on VM-Series ML-Powered NGFW in AWS is now available. In the latest AWS UTD version, attendees will receive temporary credentials to access the AWS console and launch a two-tiered environment with the latest VM-Series NGFW. We have also...

utd-aws-topology.png
rsingh by L3 Networker
  • 3683 Views
  • 0 replies
  • 1 Likes

VNET Transit Deployment Guide with Express Route - GatewaySubnet UDR error

Hello, In order to integrate the Palo Alto Azure VM Series solution into my hub and spoke architecture, I followed the steps described in the deployment guide "azure-transit-vnet-deployment-guide-common-firewall-option.pdf" . Having already active Express Route connectivity I am stuck in section "13.1 - Configure Azure User-Defined Routes". I ha...

misterxiao_1-1598350653374.png
misterxiao_2-1598350780862.png
misterxiao_3-1598351070531.png

GCP IPsec VPN HA

Dear all, I would like to know how to establish a redundant IPsec VPN connection to a redundant VM-500 (not cluster) deployed in GCP. Should we use GCP Load balancer with external IP and load balance to a single PAN? If so the GCP network LB does not perform DNAT to the Palo Alto so the PAN will receive the public IP as destination in IP packet....

Monitoring interface traffic with SNMP

Using physical PA boxes, this works fine. However, with the VM version (at least in Azure) it does not. Only the mgmt interface shows any traffic when reading interface statistics through SNMP. Is this a known issue? ethernet1/1 is the untrusted interface and I'd like to chart utilization of it, but it just stays 0. IF-MIB::ifInOctets.1 = Cou...

VM Series in Paas environment

HelloWe are currently investigating if we can have any benefit deploying Palo Alto VM series firewall in our Azure Paas environment.We are looking to increase visibility mainly for traffic towards some of our public facing applications through the AG as well as traffic towards our on-prem environment. I understand there a hub and spoke design w...

KarimSN by L1 Bithead
  • 2530 Views
  • 0 replies
  • 0 Likes

Site to Site VPN between AWS transit GW and PA FW in AWS

Hello First time posting and looking for help on solution ............i have a PA fw in AWS and i am attempting to setup a VPN to AWS transit GW.FW set up with ÖUTSIDE int using DHCP and and EIP attached ... AWS TGW (VPN) -------------------------------------------------AWS(single FW with DHCP)52.x.x.x ------------------------------------------...

  • 709 Posts
  • 107 Subscriptions
Top Solution Authors
Top Liked Authors
Labels