xdr-terraform-live/common/aws-us-gov/afs-mdr-common-services-gov/018-palo-alto-firewalls

Palo Alto Firewalls

NOTE: DISABLED

These are presently disabled by setting the number of instances to 0. This will allow us to spin up PAs when we want to.

IMPORTANT: These instances consume a license, and may do so automatically. Before destroying, make sure you return the license through the Palo Alto support portal.

Description

Creates PA firewall nodes spread across the AZs and Subnets in the security VPC. Requires that panorama nodes are already created and running and that S3 buckets for bootstrapping have been created.

NOTE

A node may get a license even if it does not successfully bootstrap. If so, it needs to be released through the web interface or the the palo alto support website (support.paloalto.com) before it can be recreated!

Post Installation

You still need to set an admin password on the nodes via:

ssh -l admin <managementip>
configure
set mgt-config users admin password
<password>
<password>
commit