|
@@ -1,7 +1,20 @@
|
|
|
-# Standard VPC
|
|
|
+# Palo Alto Firewalls
|
|
|
|
|
|
-Creates a single VPC from the subnet defined in `../accounts.hcl`, divided into 3 subnets.
|
|
|
+Creates PA firewall nodes spread across the AZs and Subnets in the security VPC. Requires that panorama nodes are already created and running and that S3 buckets for bootstrapping have been created.
|
|
|
|
|
|
-## Note:
|
|
|
+*NOTE*
|
|
|
+
|
|
|
+A node may get a license even if it does not successfully bootstrap. If so, it needs to be released through the web interface or the the palo alto support website (support.paloalto.com) before it can be recreated!
|
|
|
+
|
|
|
+## Post Installation
|
|
|
+
|
|
|
+You still need to set an admin password on the nodes via:
|
|
|
+```
|
|
|
+ssh -l admin <managementip>
|
|
|
+configure
|
|
|
+set mgt-config users admin password
|
|
|
+<password>
|
|
|
+<password>
|
|
|
+commit
|
|
|
+```
|
|
|
|
|
|
-This is the first using the "terragrunt best practice" template, so it will either serve as a good model or it will fail miserably. Either way, this may be outdated.
|