NGFW with azure gateway load balancer

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

NGFW with azure gateway load balancer

L0 Member

If I have an Azure Gateway Load Balancer set up with my NGFWs (Interface eth1/1), do I have to use a separate interface for traffic originating inside Azure to point to? I would assume yes since GWLB technically uses vxlan and so I'd need a separate interface to stick in the backend pool of an internal LB I have set up (where all the default routes point to)





L1 Bithead



Internal Traffic will not go via the Gateway Loadbalancer

you can't have GWLB and Internal LB on the same backend system (PA-VM).


So you should have 2 instances set of Palo alto, One for Internet Traffic with the GWLB and one for the Internal Traffic with the Internal LB



  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!