Use a Palo Alto Networks firewall with CloudStack

Today we added a setup guide to the official Apache CloudStack documentation for the new features we developed to integrate the Palo Alto Networks firewall into CloudStack as a service provider.

Check out the documentation…

Palo Alto Networks firewall integration in CloudStack

Start taking advantage of the Palo Alto Networks firewall orchestration in CloudStack by following the simple setup guide. Once the initial setup is done, CloudStack takes over and does all of the orchestration of the firewall.

This integration supports the following features:

  • Source NAT Management
    • Manage the Source NAT IPs
    • Manage the private gateway of the guest networks
    • Manage the Source NAT rules
  • Firewall rule management
    • Supports both Ingress and Egress firewall rules
    • Supports both ‘Allow’ and ‘Deny’ default Egress rules
  • Static NAT management
  • Port Forwarding management
  • Public IP provisioning
  • Guest network isolation
  • Threat Profile management
  • Log Forwarding management

In addition to the standard features that CloudStack offers, this integration also adds two additional features to take advantage of the unique power of the Palo Alto Networks firewall. The ability to add a Threat Profile and/or a Log Forwarding profile to all the allow firewall rules configured on the device makes this integration special. One of the main issues with the built in CloudStack virtual router is the fact that you have absolutely no visibility into the traffic flowing over your network. The addition of the Threat Profile gives you a lot more visibility into your network’s traffic and allows you to easily detect malicious behavior. The Log Forwarding functionality gives you a lot of flexibility in consuming the logs generated by the firewall so you can stay in the loop.

We are very excited to be able to offer this functionality and make it available to the community.  If you have questions, please feel free to reach out to us.

Share Your Thoughts!

420 Guy Street
Montreal, QC H3J 1S6
CANADA
19/20 Commercial Road
Melbourne, VIC 3004
AUSTRALIA
201 Sommerville Ave.
Sommerville, MA 02143
USA
530 Broadway, 9th Floor
New York, NY 10012
USA