Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound…

Auto scaling templates for VM-Series firewalls enable deployment of a single auto scaling group

(ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services

(AWS) application workloads. An ASG is a collection of EC2 instances that share similar characteristics

and can be scaled up or down automatically based on demand or predefined conditions. Auto scaling

templates for VM-Series firewalls are preconfigured templates that provide the necessary resources

and configuration to deploy and manage VM-Series firewalls in an ASG on AWS. Auto scaling

templates for VM-Series firewalls can be used to secure inbound traffic from the internet to AWS

application workloads by placing the ASG of VM-Series firewalls behind an AWS Application Load

Balancer (ALB) or a Gateway Load Balancer (GWLB) that distributes the traffic across the firewalls.

The firewalls can then inspect and enforce security policies on the inbound traffic before sending it to

the application workloads. Auto scaling templates for HA-Series, CN-Series, and IPA-Series firewalls

do not enable deployment of a single ASG of VM-Series firewalls to secure inbound traffic from the

internet to AWS application workloads, as those are different types of firewalls that have different

deployment models and use cases. Reference: Palo Alto Networks Certified Software Firewall

Engineer (PCSFE), [Auto Scaling the VM-Series Firewall on AWS], [VM-Series Datasheet], [HA-Series

Datasheet], [CN-Series Datasheet], [IPA-Series Datasheet]