Palo Alto Networks VM-Series NGFW Integration with Nutanix Cloud Cluster (NC2) on AWS

[LSpace]

This blog written by Lee Space, Nidhi Pandey and Jasmine Punia.


We're thrilled to introduce a new integration that empowers you to configure the Palo Alto Networks VM-Series Virtual Next-Generation Firewalls (NGFWs) as the default gateway for your Nutanix Cloud Clusters (NC2) instances on AWS subnets. This integration helps embrace the future of secure networking. It empowers you to optimize your AWS environment for both cost-efficiency and enhanced security. By leveraging the VM-series as your default gateway, you can streamline your network architecture, reduce operational overhead, and strengthen your overall security posture.

This innovative approach offers several key benefits:

1. Eliminate Redundancy and Save Costs: By leveraging the VM-series as your gateway, you can eliminate the need for a dedicated EC2 instance, saving you valuable resources and reducing your AWS costs. You can now utilize the existing bare-metal infrastructure you're already paying for with NC2.
2. Tighten Security Posture: This feature significantly enhances your security posture by forcing all traffic to pass through the Palo Alto Networks VM-Series Virtual Next-Generation Firewalls (NGFWs). This eliminates the possibility of bypassing your firewall or gateway device, ensuring that all traffic is subject to your security policies.
3. Simplify Management: With VM-series acting as the central control point, you will no longer need to configure local gateways on guest devices. This will help simplify your network management and reduce the potential for configuration errors. Traditionally, configuring an NC2 VM as a gateway on AWS required additional steps and resources. This new feature eliminates that complexity by allowing a Nutanix Cloud Cluster to directly assign an AWS ENI to the NIC of an NC2 VM-series
4. Prevent spread of lateral threat: Nutanix and Palo Alto Networks VM-Series virtual NGFWs integrate to deliver advanced security services inside the public cloud datacenter, providing application-centric visibility, microsegmentation, and advanced threat prevention

Lean more at : Configuring a Palo Alto Networks VM-Series NGFW on Nutanix Cloud Cluster (NC2) on AWS as Your Firewa...

Watch Now: VM Series Deployment on Nutanix NC2 Cluster in AWS

[Suchindhar07]

Super 

[H.McGoldrick]

Hi 

Will Nutanix cloud soon supported on 11.1/2 releases, and if possible a release date. 10.2 goes EoL early 2026. 

[jpunia]

Qualification of higher PANOS versions is in progress, we will update are Hypervisor compatibility-matrix  as soon as the qualification is completed.