Palo alto AWS Deployment balance traffic via ELB diff AZ

[Pattarachai]

Hi Expert ,

I would like to deployment the Palo alto firewall on AWS with different AZ for outgoing traffic we can use elb of vpc before route traffic to  transit gateway and then to palo alto ? or are any document this  please  help .

Thank you

[jmeurer · Accepted solution]

The behavior you are looking for can be implemented with the GWLB.  You can find more information in the links below.

• VM-Series Integration with an AWS Gateway Load Balancer
  • https://docs.paloaltonetworks.com/vm-series/10-0/vm-series-deployment/set-up-the-vm-series-firewall-...
• VM-Series Virtual Firewalls Integrate With AWS Gateway Load Balancer
  • https://blog.paloaltonetworks.com/2020/11/netsec-aws-gateway-load-balancer-integration/
• How VM-Series Integrates with AWS Gateway Load Balancer
  • https://blog.paloaltonetworks.com/network-security/vm-series-integration-with-aws-gateway-loadbalanc...
• AWS TGW Appliance Mode (required for multi-AZ deployments)
  • https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-appliance-scenario.html
• GitHub Source for CFT & Terraform
  • https://github.com/PaloAltoNetworks/AWS-GWLB-VMSeries