Palo Alto Networks VM-300 Bundle 2
Palo Alto Networks | PAN-OS 9.0.9-h1.xfrLinux/Unix, Other PAN-OS 9.0.9-h1.xfr - 64-bit Amazon Machine Image (AMI)
Painful to get support
Apparently, you can use the web console to register your device to get 24/7 support and to register cases , but guess what? "is not supported" anymore so you have to use the https://support.paloalto .... You have to create the account and register the device, but you need Device Serial Number or Auth Code: or Sales Order Number or Customer Id. The only one you can get is the Serial number but it doesn't work. I had my account from a paloalto trainning with the business email, we also have physical paloaltos, but you can't register for support with this account for some reason...
AHHH but there's more, in the webconsole there's an email you can use to reach support team, i redacted my email with evidence of the issue just to find out this email is not a valid way to reach support since 1 march 2016, but the console still has the option.
i know this is a good solution but i don't know why this is so difficult when you are buying from AWS...
2 stars for the effort :D
- Leave a Comment |
- Mark review as helpful
login issue ?
I have created a new instance of Palo Alto Firewall, I followed the steps to create public IP address to access the Fire Wall with user name admin password admin but not successful, keeps saying invalid username and password. Is there any other default password cause I havenâÂÂt set anything to begin with
Excellent Products
The Palo Alto Networks products are excellent, and I've had no problems with them to date. You can run active-passive in two AZs if you want. Just create a Lambda function to monitor the firewall and change the AWS route table if the primary firewall fails. This is not a limitation of the PAN firewalls, but rather the way AWS works. Since AWS does not offer dynamic routing, you have to handle it in a different manner.
Can't run Active/Passive in different Availability Zones
I spent several hours with support, and they finally told me it's not supported. AWS recommends you run in multiple Availability Zones for Redundancy and HA, but this won't work with the Palo Alto device, unless you purchase 2 per AZ.
Fast and Secure
Excellent, The VM-Series works perfectly
Pros:
-1 click deploy
-Easy to configure as Gateway, so it can inspect all traffic.
-Includes all Palo Alto Licenses.
-Better performance than the physical ones.
-BYOL option.
Cons:
-You must purchase the VM-300, it may be too much for minor requirements
-No VM-100/200 Series Bundles available