Deploy The Vm-Series Firewall Before The Netscaler Vpx - PaloAlto Networks VM-100 Deployment Manual

Vm-series firewall deployment guide
Table of Contents

Advertisement

Set Up a VM-Series Firewall on the Citrix SDX Server
Set up the VM-Series Firewall to Process North-South Traffic Using L2 or Virtual Wire Interfaces (Continued)
Step 4
Create a basic policy rule to allow traffic
through the firewall.
This example shows how to enable traffic
between the NetScaler VPX and the web
servers.

Deploy the VM-Series Firewall Before the NetScaler VPX

The following example shows how to deploy the VM-Series firewall to process and secure traffic before it
reaches the NetScaler VPX. In this example, the VM-Series firewall is deployed with virtual wire interfaces, and
the client connection requests are destined to the VIP on the NetScaler VPX. Note that you can deploy the
VM-Series firewall using L2 or L3 interfaces, based on your specific needs.
Topology Before Adding the VM-Series Firewall
VM-Series
Deployment
Guide
Secure North-South Traffic with the VM-Series Firewall
1.
Select
Policies > Security
2.
Give the rule a descriptive name in the
3.
In the
tab, set the
Source
you defined. In this example, select client.
4.
In the
tab, set the
Destination
server-side zone you defined. In this example, select server.
5.
In the
tab, click
Application
which you want to allow access.
6.
In the
tab, complete these tasks:
Actions
a.
Set the
Action Setting
b.
Attach the default profiles for antivirus, anti-spyware,
vulnerability protection and URL filtering, under
.
Setting
7.
Verify that logging is enabled at the end of a session under
. Only traffic that matches a security rule will be logged.
Options
, and click
.
Add
tab.
General
to the client-side zone
Source Zone
to the
Destination Zone
to select the applications to
Add
to
.
Allow
Profile
35

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Vm-200Vm-1000-hvVm-300

Table of Contents