Use the GitHub Bootstrap Files as Seed
AWS Auto Scale Version 2.0 bootstrap process.
Launch a VM-Series firewall on AWS from the AWS Marketplace using the bootstrap files provided in the GitHub repository, modify the firewall configuration for your production environment. Then, export the configuration to create a new bootstrap.xml file that you can now use for the VM-Series Auto Scaling template.
- To launch the firewall see Bootstrap the VM-Series Firewall on AWS.
- Add an elastic network interface (ENI) and associate an elastic IP address (EIP) to it, so that you can access the web interface on the VM-Series firewall. See Launch the VM-Series Firewall on AWS for details.
- Use the EIP address to log in to the firewall web interface with admin as the username and password.
- Add a secure password for the admin user account (DeviceLocal User DatabaseUsers).
- (Optional) Configure the firewall for securing your production environment.
- Commit the changes on the firewall.
- Generate a new API key for the administrator account. Copy this new key to a new file. You will need to enter this API key when you launch the VM-Series Auto Scaling template; the AWS services use the API key to deploy the firewall and to publish metrics for auto scaling.
- Export the configuration file and save it as bootstrap.xml. (DeviceSetupOperationExport Named Configuration Snapshot).
- Open the bootstrap.xml file with a text editing tool and delete the management interface configuration.
- (Required if you exported a PAN-OS 8.0 configuration) Ensure that the setting to validate the Palo Alto Networks servers is disabled. Look for <server-verification>no</server-verification>.
- If the check is yes, change it to no.
- Save the file. You can now proceed with Launch the VM-Series Auto Scaling Template for AWS (v2.0).
Customize the Bootstrap.xml File (v2.0)
Customize the Bootstrap.xml File (v2.0) The bootstrap.xml file provided in the GitHub repository uses a default username and password for the firewall administrator. Before deploying ...
Plan the VM-Series Auto Scaling Template for AWS (v2.0 and v2.1)
Plan the VM-Series Auto Scaling Template for AWS (v2.0 and v2.1) The items in this checklist are actions and choices you must make for implementing ...
Create a new Bootstrap File from Scratch
Create a new Bootstrap File from Scratch Launch a new VM-Series firewall on AWS using the AMI for the PAN-OS version (8.0 or 8.1), without ...
What Components Does the VM-Series Auto Scaling Template for AWS (v2.0) Leverage?
What Components Does the VM-Series Auto Scaling Template for AWS (v2.0) Leverage? The VM-Series Auto Scaling template for AWS includes the following building blocks: Building ...
Modify Administrative Account and Update Stack (v2.0)
Modify Administrative Account and Update Stack (v2.0) If you have already deployed the template and now want to change the password for the administrative account ...
Auto Scale VM-Series Firewalls with the Amazon ELB Service
Auto Scale VM-Series Firewalls with the Amazon ELB Service Palo Alto Networks delivers the Auto Scaling VM-Series Firewalls CloudFormation Templates and scripts for deploying an ...
Launch the VM-Series Auto Scaling Template for AWS (v2.0)
Launch the VM-Series Auto Scaling Template for AWS (v2.0) You can choose to deploy the firewall template in one VPC and the sample application template ...
VM-Series Auto Scale Template for AWS Version 2.0
Learn about the VM-Series Auto Scale Template for AWS Version 2.0. ...
Bootstrap the VM-Series Firewall
Bootstrap the VM-Series Firewall Bootstrapping allows you to create a repeatable and streamlined process of deploying new VM-Series firewalls on your network because it allows ...