GWLB Sub-Interface

Hello,

Question about GWLB and sub-interface mapping.  If I have 2 VPCs (VPC-Shared and VPC-Production) and I associate VPC-Shared with a GWLB Endpoint to sub-interface e1/1.100 on a zone also named VPC-Shared and VPC-Production with an endpoint to e

IPv6 support in Azure/AWS

Anyone already succeeded in getting IPv6 addresses working on our FW in Azure or AWS?

Trying to get the mgmt-interface use an IPv6 address in order to connect to IPv6 Panorama.

If required this can also be done via DP interface and service routing.

Tr

Moving public IP from VM to Palo Alto in Azure

We deployed a Palo Alto VM-300 in an existing Azure tenancy.  During the process to move public IP Addresses from the Virtual Machine to the Palo Alto Untrusted Interface we ran into the following error.  

"Network interface associated with virtual m

When adding public ips to vm firewall, I want to know the maximum number of ips that can be added.

hello
There was a request from a customer to use the PaloAlto VM firewall.
In response to the customer's request, the contents of the link below have been delivered to the customer.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000

Zero trust in AWS issue with ALB

We are trying to implement a zero trust environment inside our AWS cloud. We are using a transit gateway deployment, and have all traffic going through a secuirty vpc which houses a pair of PA-VM's. These firewalls are reached by the other VPC's thro

Palo in AWS to Azure VPN Gateway

Hi All, I am trying to setup a site-to-to site VPN between Palo (v9.0.1) and Azure VPN gateway.

I have a question and an issue that I am trying to resolve...

NAT-T should be enabled in the gateway settings since AWS NATs everything?

This is the error

Azure refarch template broken

https://github.com/PaloAltoNetworks/ReferenceArchitectures/tree/master/Azure-1FW-3-interfaces-existing-environment-BS

This is broken as of about 2 weeks ago from this post.

New, undocumented field called "Custom Data" - need to state what needs to be

AWS Gateway Load Balancer Target Group Instances Remain Unhealthy

We've deployed VM-Series into AWS INSPECTION VPC implementing the documented approach around use of a Gateway Load Balancer (GWLB) as an Endpoint Service then Endpoints in APPLICATION VPC so that inspection can be achieved when North/South traffic en

Oracle Cloud lower vCPU count

Hi all, try to figure out what will happen to my Vm-series FW in Oracle Cloud if I lower my vCpu count. Will the firewall know that the cores changed and adjust or will just crash? I'm using OCPUs and it doubles the vCPU when enabled. Thanks

SAML for management access to PA

Hi folks,

We got a customer who needs to authenticate firewall admins (PA management) against Azure SAML.

Azure only allows you to specify a unique SSO URL being the type https://<Customer Firewall FQDN>:443/SAML20/SP

Problem is, this is a standard Ac

New interface at Palo-alto VM in AWS EC2 instance not turning UP

On a PA-VM (VM500, SW ver- 10.0.8-h8.) in Amazon cloud EC2 instance, i am struggling to create a new interface and bring it up, tried below steps already-
1. Created an ENI and attached to the respective EC2 instance.
2. Source/Destination check disabl

PA VM-Series AWS - Upgrade Path downtime estimation

Hey all,

   I need to upgrade a PA-VM 300 (m5.xlarge) series running on AWS Plataform from 9.1.6 to 10.1.5-h1.

   Upgrade path will be the following : 9.1.6 => 9.1.14 => 10.0.0 => 10.0.10 => 10.1.5-h1 

As this is a Stand-Alone FW, I will need to have

Palo HA in Azure - traffic flow

I have a pair of VM300 gateways running 9.1.13 in Azure. I'm using a 'load balancer sandwich' approach to provide active active HA.

The public load balancer in front of the firewalls does a good job of delivering inbound traffic.  However, routing to

How to upgrade PA on AWS and How much downtime do we need ?

Hi,

I have the experience how to upgrade PAN os with ON-PRIMES .But I don't know how different on AWS and what is impact.I would like to upgrade my PA on AWS.

my pan-os is 8.1.So It is very old . I would like to upgrade latest version. So let me know w