Setting Up Palo Alto Networks VM-Series Firewall on Alibaba Cloud
VM-Series by Palo Alto Networks
The VM-Series next-generation firewall protects your applications and data with the same security capabilities that protects thousands of customer networks worldwide.
The VM-Series next-generation firewall allows developers and cloud security architects to embed inline threat and data loss prevention into their application development workflows. Third party templates combined with VM-Series automation features allows you to create “touchless” deployments that eliminate “change control friction”, enabling developers to operate at the speed of the cloud. Automation features such as the API, Dynamic Address Groups and External Dynamic Lists allow you to utilize external data to drive application whitelisting and segmentation policy updates while preventing threats. Note that bootstrapping is not supported in this release.
Palo Alto Networks VM-Series firewall can be deployed on Alibaba Cloud servers easily, as described in the following sections.
Step 1: Download the VM-Series for KVM qcow2 file from the Palo Alto Networks Customer Support Portal.
Step 2: Create a storage bucket and upload the qcow2 file to the storage bucket.
Step 3: Copy the OSS address object (the file URL).
Step 4: Import the VM-Series firewall qcow2 image into ECS.
For detailed instructions on the deployment of VM-Series firewall on Alibaba Cloud, refer to Prepare to Deploy the VM-Series Firewall on Alibaba Cloud
Learn about the VM-Series firewall deployment on the Alibaba cloud
Supply these minimum system requirements to successfully deploy the VM-Series firewall on Alibaba Cloud
Complete preliminary tasks before creating the VPC and Networks
Learn how to use the Alibaba Cloud console to create the networks to deploy the VM-Series firewall with multiple interfaces
Learn how to create a VPC, V-Switches, security groups, and security group rules.
Learn how to create a VM-Series instance in Alibaba Cloud, and create the network interfaces for the firewall
Learn how to use V-Switches to segment your VPN into subnets.
Use the Alibaba CLI to add ENIs to the Alibaba SLB
Technical Support (International): +1 408 738 7799
Version: PAN-OS 8.1 and above
Available in all regions — China Mainland and International regions.