NGFW with azure gateway load balancer

[Pat-Allen]

If I have an Azure Gateway Load Balancer set up with my NGFWs (Interface eth1/1), do I have to use a separate interface for traffic originating inside Azure to point to? I would assume yes since GWLB technically uses vxlan and so I'd need a separate interface to stick in the backend pool of an internal LB I have set up (where all the default routes point to)

Thanks!

Pat

[Julienmongin]

Hi

Internal Traffic will not go via the Gateway Loadbalancer

you can't have GWLB and Internal LB on the same backend system (PA-VM).

So you should have 2 instances set of Palo alto, One for Internet Traffic with the GWLB and one for the Internal Traffic with the Internal LB