cannot connect to VM-Series Next-Generation Firewall

[careem785]

cannot connect to VM-Series Next-Generation Firewall (both BYOL and Bundle1)

getting connection refused for both SSH and HTTPS

tried with public ip  and private ip

[tostern]

Hi @careem785 

where do you deploy it? Azure/AWS/GCP

Regards,

Torsten

[JoergSchuetter]

Hello @careem785 

Are you talking about a setup in Azure? If so, please check the NSG (Network Security Group) for the firewall (NIC and VNET).

[tostern]

when you talk about Azure then create please a NSG as shown below and attach it to the NIC.

 

Then when you using a Public IP (Standard) then is there a implicite deny when you not attach any NSG to it

[careem785]

its in AWS and security group rules are fine , i can ping to the device but SSH and HTTPS not working 

[tostern]

Hi @careem785 

are you using the correct ssh key pair? Look at Step 4 in that document

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-o...

Then AWS works with ssh key pairs and not with username/password

Regards,

Torsten

[careem785]

key pair is fine , i am getting "connection refused" error message

[tostern]

did you swap the management interface? 

[careem785]

no , how to do that?

[tostern]

you can't doing it without having cli access to firewall. Please double check taht you are using the right interface and not that you try to connect to the untrust interface.