Change Scaling Parameters and CloudWatch Metrics (v2.1)
This task describes how to use PAN-OS metrics as scaling
parameters to trigger autoscale actions.
This task describes how to use custom PAN-OS metrics as
scaling parameters to trigger auto scale actions.
When you launch the firewall template,
the template creates a namespace with scale-in and scale-out policies
that you can use to define auto scaling actions. The policy names
include the namespace, as shown below:
- <Custom Namespace>-scalein - Remove 1 instance
- <Custom Namespace>-scaleout - Add 1 instance
Each
PAN-OS metric has a default notification that you can delete and
replace with auto scale actions. For each metric, create two actions:
one that determines when to add a VM-Series firewall, and another
that determines when to remove a VM-Series firewall.
- In AWS, select .
- Choose aCustom Namespacelink, and select the metrics link to view the custom PAN-OS metrics.
- Check a box to select a metric, then select theGraphed metricstab.
- In theStatisticscolumn, choose a statistic criteria (such as average, minimum and maximum) and choose a time period.
- In theActionscolumn select the bell (Create alarm).
- Define an alarm that removes a firewall when CPU utilization meets or falls below the criteria you set, over the time frame you set.
- SelectEditto change the graph title.
- UnderAlarm detailsfill in theNameandDescription, choose an operator, and set the minimum value to maintain the current instances. If the minimum value is not maintained, an instance is removed.
- UnderActions,deletethe default notification.
- Select+AutoScaling Action.
- Use theFrom thelist to select your namespace.
- FromTake this action, select the policy to remove an instance.
- SelectCreate Alarm.
- Create a second alarm that adds a firewall when CPU utilization meets or exceeds the criteria you set.
- To view your alarms, select .
To edit an alarm from this window, check the box next to the alarm and select .
