cannot connect to VM-Series Next-Generation Firewall

[careem785]

cannot connect to VM-Series Next-Generation Firewall (both BYOL and Bundle1)

getting connection refused for both SSH and HTTPS

tried with public ip  and private ip

[tostern]

Hi @careem785 

where do you deploy it? Azure/AWS/GCP

Regards,

Torsten

[JoergSchuetter]

Hello @careem785 

Are you talking about a setup in Azure? If so, please check the NSG (Network Security Group) for the firewall (NIC and VNET).

[tostern]

when you talk about Azure then create please a NSG as shown below and attach it to the NIC.

 

Then when you using a Public IP (Standard) then is there a implicite deny when you not attach any NSG to it

[careem785]

its in AWS and security group rules are fine , i can ping to the device but SSH and HTTPS not working 

[tostern]

Hi @careem785 

are you using the correct ssh key pair? Look at Step 4 in that document

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-o...

Then AWS works with ssh key pairs and not with username/password

Regards,

Torsten

[careem785]

key pair is fine , i am getting "connection refused" error message

[tostern]

did you swap the management interface? 

[careem785]

no , how to do that?

[tostern]

you can't doing it without having cli access to firewall. Please double check taht you are using the right interface and not that you try to connect to the untrust interface.

[careem785]

i am launching with only one interface and tried to access, 

[careem785]

i am launching with only one interface and tried to access, 

[tostern]

It is really hard to say what is going wrong here without seeing it but i still think that something is wrong with Security Rules, routing, ssh key pair or Internet Gateway.

Please review everything against our official guides.

Regards,

Torsten

[careem785]

how can i open a support account , without login in to the firewall , because the support account asking serial no

[tostern]

Hi,

i recommend that you destroy the environment and redeploy it and following this guide https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-o...

or use the following script https://github.com/wwce/aws-cft/tree/master/AWS-Ref-Architecture