Focus

VM-Series Deployment Guide

VM Monitoring with the Panorama Plugin for GCP

Table of Contents

VM Monitoring with the Panorama Plugin for GCP

Google Cloud Platform plugin for Panorama overview.

The Panorama plugin for GCP retrieves the internal and external IP addresses from running VMs, and periodically retrieves IP-to-tag mappings from VMs in connected GCP VPCs.

You can use tags to organize VMs into dynamic address groups, and then reference your tags in Security policy rules that allow or deny traffic to specific VM IP addresses. To consistently enforce Security policy, you can then push rules to your VM-Series firewalls.

Workloads in the cloud are often ephemeral. To write a granular security policy based on your requirement, you can use the application’s tags in Panorama security policy using the dynamic address groups (DAGs). As a result, as workloads come up and down, the appropriate security policy will be applied.

The Panorama plugin for GCP version 3.0.0 and above supports shared VPC architectures. When you use a Shared VPC, a single host project may define (and share) the VPCs for all service projects underneath to deploy your resources. By onboarding the host project into the Panorama plugin for GCP, you can automatically onboard your service projects as well.

The Panorama plugin for Google Cloud Platform (GCP) version 2.0.0 enables you to create a VM monitoring configuration that authenticates with a GCP project and monitors VM-Series firewalls and other VMs deployed within it. Once you establish a connection to your project, the plugin can retrieve IP-address-to-tag communication between Panorama and GCP assets. Tags can be predefined attributes, user-defined labels for VMs, and user-defined network tags (see Review and Create Tags).

Configure VM Monitoring with the Panorama Plugin for GCP

Enable Session Resiliency on VM-Series for GCP

Configure VM Monitoring with the Panorama Plugin for GCP