The Panorama plugin for AWS enables the
VM Monitoring capability. It allows you to track the virtual machine
inventory within your AWS VPCs so that you can consistently enforce
Security policy that automatically adapts to changes within your
AWS deployment. As virtual machines are provisioned, de-provisioned
or moved, this solution allows you to collect the IP addresses and
the associated set of attributes (or metadata elements) as tags.
You can then use the tags to define Dynamic Address Groups and
use them in Security policy.
You can download the AWS plugin for Panorama 8.1.3 or later from
the Customer Support Portal or directly from
. Panorama can push
the virtual machine attributes that it retrieves to firewalls running
PAN-OS 8.0 and later.