About the VM-Series Firewall on Google Cloud Platform
Prepare to deploy a VM-Series firewall on a Google® Compute Engine instance.
VM-Series firewalls bring next-generation firewall features to the Google® Cloud Platform (GCP™).
To maximize performance, VM-Series firewalls on GCP support the Data Plane Development Kit (DPDK) libraries, which provide fast packet processing and improve network performance based on specific combinations of VM-Series firewall licenses and Google Cloud Platform virtual machine (VM) sizes.
- Google Cloud Platform and the VM-Series Firewall
- Minimum System Requirements for the VM-Series Firewall
Google Cloud Platform and the VM-Series Firewall
Learn about Google Cloud Platform (GCP) and the VM-Series firewall.
The VM-Series firewall integration with Google Cloud Platform (GCP) allows you to deploy the VM-Series firewall as a virtual machine (VM) running on a Google Compute Engine instance. This process is simplified when you Deploy the VM-Series Firewall from Google Cloud Platform Marketplace.
After you deploy the VM-Series firewall, you can configure the following optional services:
- Enable Google Stackdriver Monitoring on the VM Series Firewall—From the firewall, push PAN-OS metrics to the Google Stackdriver service.
- Enable VM Monitoring to Track VM Changes on Google Cloud Platform—Set up a VM information source that monitors the specific GCP zone containing your instances. The monitored VM metadata can include predefined GCP properties (such as the project ID) and user-defined properties (such as labels and network tags).
Minimum System Requirements for the VM-Series Firewall
Review the minimum system requirements for a VM-Series firewall on the Google Cloud Platform.
You must choose a VM-Series Firewall License for Public Clouds and a license method: bring-your-own-license (BYOL) or pay-as-you-go (PAYG). To deploy a VM-Series firewall on a Google Compute Engine instance, you must choose a machine type that supports the VM-Series System Requirements for your license.
Refer to the table below for the minimum recommended predefined standard machine types for each license. You can choose a higher performing machine type or you can create your own custom machine type if the resource requirements are compatible with your VM-Series firewall license.
A single Google Compute Engine instance supports up to eight network interfaces. If you want to configure eight interfaces, choose n1-standard-8 or a larger machine type.
|Capacity||BYOL||Bundles 1 and 2|
|PAYG||Marketplace||Recommended Predefined Machine Type|
Set Up the VM-Series Firewall on Google Cloud Platform
Deploy the VM-Series Firewall on a Google Cloud Engine instance. ...
VM-Series Firewall on Google Cloud Platform
Deploy the VM-Series firewall from Google Cloud Platform Marketplace, enable Google Stackdriver monitoring, and enable VM-Series firewalls to monitoring Google Compute Engine instances. ...
VM-Series Deployments The VM-Series firewall can be deployed on the following platforms: VM-Series for VMware vSphere Hypervisor (ESXi) and vCloud Air You can deploy any ...
Prepare to Set Up the VM-Series Firewall on Google Public Cloud
Prepare to set up a VM-Series firewall on Google Cloud Platform, configure your Google accounts access (including the SSH key pair), plan VPC networks, and ...
Management Interface Swap for Google Cloud Platform Load Balancing
Learn about management interface swap for Google Compute Engine. ...
Bootstrap the VM-Series Firewall on Google Cloud Platform
Bootstrap the VM-Series Firewall on Google Cloud Platform To bootstrap you must create a specific file structure in a Google storage bucket. You provide the ...
Virtualization Features VM-50 Lite Integration with Azure Security Center View high-priority firewall logs as security alerts on the Azure Security Center dashboard with the default ...
Deploy the VM-Series Firewall from Google Cloud Launcher
Use Google® Cloud Platform Marketplace to deploy the VM-Series firewall with a minimum of three interfaces (Management, Trust, and Untrust). ...
Secure Kubernetes Services in a Google Kubernetes Engine Cluster
To secure north-south traffic for k8s, deploy the VM-Series firewalls in an instance group and configure the GCP plugin on Panorama to learn the internet-facing ...