How to deploy Palo Alto firewall on AWS cloud using VPC and EC2

This is a step-by-step guide on how to deploy Palo Alto firewall on AWS public cloud using VPC and EC2 services.

Palo Alto is a leading network security company, and makes great products that compete in the enterprise security sector.
===========================
Network Security courses on ElastiCourse/Udemy:

Introduction to Fortigate Firewall

Fortigate Advanced Configuration

Introduction to FortiManager course
===========================
AWS Web Application deployment and migration course

[Dash]

17:18 Just a heads up for anyone following: I didn't have an Internet Gateway as an option.
I had to go to Services > Network Content and Delivery > VPC >Internet Gateway and create one. Then attach it to the VPC
Great stuff!

[aussietaipan]

Thanks mate. We are soon to deploy PA and move to PA in AWS. This vid will make me look like an expert.

[SecurityPanda]

Very well explained !!

Appreciate your efforts !!!

[felixmoshami]

quality content i would request you come up with palo alto firewall configuration as a course

[rileylabski]

Very good video to get someone oriented/deploying in AWS. Top notch work!

[ahmedfarhanable]

Great video, next video could be how to connect the ec2 in private subnet to the internet. I have ec2 now in private subnet but it seems we need to enable NAT to allow ec2 to access internet. If we have full video that would be great end to end. Enable url filtering block ips etc

[joelmck]

Thank you for this. Very well demonstrated.

[anuragk]

Thanks for the video. Looking forward to see more videos.

[AbhishekSingh-zdgm]

Thanks for the tutorial. i am unable to pat the traffic for a test pc i created, which is on the inside of the firewall, since the wan port information is not visible on the firewall. any idea how can i achieve it??

[adeadedeji]

This is great. Got a question please. If I deploy another palo alto vm, how would I configure the palo alto panorama to give me an overview of all the firewalls? Thanks

[quyleanh]

now i can implement the policy from port e1/2 (source) to port e1/1 (destination same wan) to let the private ip out to the internet, right?

[chuckjamm]

Thanks for sharing this video. For me, I now have questions - for this setup is much different that a setup in VMWare or having a physical firewall. I see that you are using a private IP space for your Public IP scheme. Is there some internal NAT that is done by the VPC gateway in order to use the firewall as a VPN server?

[khoi]

Hi, I just deployed a palo on AWS but seem to be having problems with the management interface not having an internet connection. i have associated the management subnet to the outside route table but still no luck. pls help

[jonathanlynn]

Just to clarify - Why are the links in the description about Fortigate? I was expecting links to the Palo Alto Courses.

[joelryan]

Does anyone know how to remove the vm series firewall free tier from aws marketplace? The version I subscribed to returns an error that said the instance is deactivated or I do not have permissions.

[rajeshrawat]

Can we integrate one plao Alto VM with multiple VPC in aws

[hussainqureshi]

My interfaces are red even after Commit although i followed the steps properly
i am talking about ethernet1/1 & ethernet 2/2
i restarted the instance again & again but same. what could be the possible reason ?