Install the Panorama Plugin for GCP
Focus
Focus
VM-Series

Install the Panorama Plugin for GCP

Table of Contents

Install the Panorama Plugin for GCP

Install the Panorama plugin for GCP to manage VM Monitoring or auto scaling deployments through Panorama.
Where Can I Use This?What Do I Need?
  • Google Cloud Platform (GCP)
  • VM-Series License (PAYG or BYOL)
  • VM-Series plugin
  • Panorama
  • Panorama plugin for GCP
The Panorama plugin for GCP is required if you want to use Panorama to manage VM Monitoring or auto scaling deployments created with Palo Alto Networks templates. Install the plugin version that supports the GCP features you want to configure, as detailed in the Compatibility Matrix table for Public Clouds.
You can't upgrade the Panorama plugin for GCP from version 1.0.0 to version 2.0.x. If you have installed version 1.0.0, remove it before installing 2.0.x.
If you have a standalone Panorama or two Panorama appliances installed in an HA pair with multiple plugins installed, the plugins might not receive updated IP-tag information if one or more of the plugins isn't configured. This occurs because Panorama won't forward IP-tag information to unconfigured plugins. Additionally, this issue can occur if one or more of the Panorama plugins isn't in the Registered or Success state (positive state differs on each plugin). Ensure that your plugins are in the positive state before continuing or executing the commands described below.
If you encounter this issue, there are two workarounds:
  • Uninstall the unconfigured plugin or plugins. It's recommended that you don't install a plugin that you don't plan to configure right away
  • You can use the following commands to work around this issue. Execute the following command for each unconfigured plugin on each Panorama instance to prevent Panorama from waiting to send updates. If you don't, your firewalls might lose some IP-tag information.
    request plugins dau plugin-name <plugin-name> unblock-device-push yes
    You can cancel this command by executing:
    request plugins dau plugin-name <plugin-name> unblock-device-push no
The commands described are not persistent across reboots and must be used again for any subsequent reboots. For Panorama in HA pair, the commands must be executed on each Panorama.
  1. Verify your Panorama installation.
    On Panorama, ensure that your PAN-OS version meets the requirements to support GCP auto scaling.
  2. Remove the Panorama plugin for GCP v1.0.
    If you have the Panorama plugin v1.0 installed, you must remove it.
  3. Install the Panorama plugin for GCP.
    Select PanoramaPlugins, and type gcp in the search bar. Install the plugin version that supports the features you want to configure (see the Compatibility Matrix table for Public Clouds).
    After the installation, you can see the plugin in the Panorama dashboard General Information list. View PanoramaGoogle Cloud Platform and you see the Setup, Monitoring Definition, and AutoScaling interfaces.
  4. (Optional) If your Panorama appliances are in a high availability configuration, you must manually install the same version of the Google plugin on both Panorama peers.
    Configure the Google plugin on the active Panorama peer only. On commit, the configuration syncs to the passive Panorama peer. Only the active Panorama peer polls Google VMs you have configured for VM Monitoring.