Deploy The Vm-Series Firewall Using Layer 2 (L2) Or Virtual Wire Interfaces - PaloAlto Networks VM-100 Deployment Manual

Set Up a VM-Series Firewall on the Citrix SDX Server

Deploy the VM-Series Firewall Using Layer 2 (L2) or Virtual Wire Interfaces

To secure north-south traffic, this scenario shows you how to deploy the VM-Series firewall in a L2 or a virtual
wire deployment. The VM-Series firewall secures traffic destined to the servers. The request arrives at the VIP
address of the NetScaler VPX and is processed by the VM-Series firewall before it reaches the servers. On the
return path, the traffic is directed to the SNIP on the NetScaler VPX and is processed by the VM-Series firewall
before it is sent back to the client.
For the topology before adding the VM-Series firewall, see
Topology After Adding the VM-Series Firewall
The following table includes the basic configuration tasks you must perform to deploy the VM-Series firewall.
For firewall configuration instructions refer to the
configuration on the NetScaler VPX is beyond the scope of this document; for details on configuring the
NetScaler VPX, refer to the Citrix documentation.
Set up the VM-Series Firewall to Process North-South Traffic Using L2 or Virtual Wire Interfaces
Step 1 Install the VM-Series
VM-Series Deployment Guide
PAN-OS Getting Started
Firewall. On the SDX server, make sure to enable
interface. This setting allows the firewall to bridge packets that are
destined for the VIP of the NetScaler VPX.
Secure North-South Traffic with the VM-Series Firewall
Topology Before Adding the VM-Series
Guide. The workflow and
Firewall.
on each data
Allow L2 Mode
33