PaloAlto Redundant VPN tunnel with NAT-T between datacenter and AWS environment

[iksudheer]

Dear All, Can you share your views/suggestions for below questions. Thank you

1. What is the standard best practice for setting up redundant VPN tunnel with NAT-T with PaloAlto between datacenter and AWS customer environment
2. Can we have two PaloAlto FW in two different vlans as Active-Active configuration without any sort of sync between them behind a load balancer.

Appreciate your inputs.

[jperry1]

VM Series in AWS supports Active/Passive only and must be in the same Availability Zone. Here is where you can find more information on this setup

https://www.paloaltonetworks.com/documentation/81/virtualization/virtualization/set-up-the-vm-series...

[iksudheer]

Dear jperry1

Thanks much for your inputs.Will go through the link.

[OtakarKlier]

Hello,

Also check out the documentation on AWS, they have best practives and deployment guides:

https://www.paloaltonetworks.com/documentation/81/virtualization/virtualization/set-up-the-vm-series...

Cheers!