This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
VM-Series in the Public Cloud
The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.
About VM-Series in the Public Cloud

Welcome to the VM-Series in the Public Cloud discussion forum! This community exists as a resource for you to discuss VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud and Alibaba. We encourage you to engage in this rapidly growing community to share ideas, pose questions, and propose real-world solutions to any challenges that may arise.

Disclaimer:
This forum is provided for Live Community members to discuss and share information pertaining to the VM-Series deployments on AWS, Microsoft Azure, Google Cloud Platform Oracle Cloud and Alibaba. Please use the information from this forum at your own risk and make sure to test and verify proposed solutions presented here. For information on contacting Palo Alto Networks support, click here.

Discussions

Start a conversation

Welcome to the VM-Series in the Public Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 3728 Views
  • 0 replies
  • 0 Likes

Resolved! Add Virtual disk to Panorama on Azure

Hi everyone, I'm testing the option to migrate our current Panorama VM appliance to azure, I already spin up a new vm and it works just fine, I encountered an issue adding a new virtual drive to the vm, followed all the steps and running the "show system disk details" i get this message Name : sdcState : PresentSize : 2095104 MBStatus : Unava...

Panorama 8.1 in Azure

Has anyone had any luck deploying Panorama 8.1 beta in Azure ? I have tried a bunch of times getting it deployed in my environment and it seems to fail every time. I wonder if maybe this is partially due to the fact that I am deploying it in an environment that by default has Palo Altos controlling internet egress . Have not been able to figure ...

AWS Transit VPC GitHub Solution Question #2 - Access Denied

Has anyone encounted an access denied error for the cloudTrailLambda getting to the Transit VPC S3 bucket? [INFO] 2018-05-21T15:52:58.460Z 085dd5fc-5d0f-11e8-ba39-23960ea84bc5 Starting new HTTPS connection (1): maskednamed-transitvpccloudtrail-us-east-1-acctnumber.s3.amazonaws.com An error occurred (AccessDenied) when calling the GetObject oper...

Resolved! Deploying ARM template for Azure

Hi All,Anyone encountered issue while deploying arm template from this link: "https://github.com/PaloAltoNetworks/Azure-interface-options"? i cannot seems to add it to my existing resource group using all the options. The error i have is as below.

error.png
stan1 by • L1 Bithead
  • 10276 Views
  • 11 replies
  • 0 Likes

Resolved! AWS ELB one to one relationship with backend

According to the documentation, if you don't have an ELB sandwich then there is a one to one relationship between the firewall and the back end server. I spoke to support and the answer was the fact that you can only have one ENI attached per subnet. My customer has an existing IAAS stack and wanted only 1 FW per AZ. But the proxy servers in the...

Screenshot 2018-04-12 14.29.35.png
PerryK by • L2 Linker
  • 3427 Views
  • 2 replies
  • 0 Likes

Resolved! AWS Transit VPC GitHub Solution Question

Does any one know for the following solution (https://github.com/PaloAltoNetworks/aws-transit-vpc) if you are have a shared services account where the Transit devices are going if the initialize Transit CFN and the Subscriber CFN both have to be run in the same account?

VM-300 in Azure sizing and resiliency

Hi All, im trying to spec up a resilient HA solution for the VM-300 series PAYG bundle 1 option within azure, and just need the following clarified:-- if i were to purchase the VM-300 option 1 bundle (https://azuremarketplace.microsoft.com/en-us/marketplace/apps/paloaltonetworks.vmseries-ngfw?tab=PlansAndPrice) does this mean i also need to purc...

tchark by • L1 Bithead
  • 6990 Views
  • 5 replies
  • 0 Likes

Resolved! Troubleshooting classic ELB

I have a support call scheduled for tomorrow but if anyone has any ideas about this that would be greatly appreciated. I deployed the classic ELB template example successfully. My customer then took the firewall.template and integrated it into their stack making it a nested stack feeding it all the parameters required. The firewalls come up in a...

PerryK by • L2 Linker
  • 6534 Views
  • 5 replies
  • 0 Likes

Resolved! vpc-classic-v1.2.1.template issues

So I deployed this template exactly as described on the site. I kept all the default pre-populated settings where possible and used my own S3 buckets. Tried it both with and without nat gateways. This is with 3 AZ in us-east-1. All the AWS artifacts get created, the nested stack gets created, but the firewalls do not! I checked the logs from the...

PerryK by • L2 Linker
  • 4207 Views
  • 3 replies
  • 0 Likes

Can PA block IP address in X-Forwarded-For ?

Hello, I built the sandwich type with external ELB & internal ELB.As you know, external ELB shifts original client IP to X-Forwarded-For.I enabled 'Use X-Forwarded-For Header in User-ID and I looked XFF IP in user-id of URL Filtering logs.But PA has not shown XFF IP in traffic logs. I would like to block XFF IP using user-ID. If anyone knew ...

Resolved! Finding Serial # and CPU ID from AWS

So frustrating! I have been trying to register with Palo Alto so I can be authorized to use my VM I set up in AWS. No one I have asked seems to know where I can get the following information to use my VM and see the PA portal. If anyone can tell me exactly where I can find this information, please let me know. Thanks.

serial.png

Resolved! VM-Series in Azure Marketplace charges

Some basic cost based questions here from a newbie: After deploying Bundle-1 of the PAYG VM-300 series from the Azure Marketplace:- if I "stop" the instance, I won't get Azure compute charge BUT will Palo Alto continue to charge me for the license or other misc charges? [I understand storage charges will continue]- will stopping the instance m...

kjsteven by • L0 Member
  • 7111 Views
  • 3 replies
  • 0 Likes

Site-to-Site VPN from a Palo Alto Firewall in the AWS.

Folks,We have provisioned a Palo Alto Firewall in one of the AWS VPC. This is essentially a single legged deployment and the function of this firewall will only be to act as a transit firewall. This firewall will have VPN connectivity to the corporate firewall and to some other remote VPC's. Traffic filtering will be done on this Palo Alto Firew...

nson2139 by • L3 Networker
  • 19873 Views
  • 15 replies
  • 0 Likes
  • 535 Posts
  • 107 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks