Which two configuration options does Palo Alto Networks recommend for outbound high availability (HA) design in Amazon Web Services using a VM-Series…

Transit Gateway and Security VPC:

Using a transit gateway in conjunction with a Security VPC is a recommended design for outbound high

27/103

availability (HA) in AWS. This configuration ensures that traffic can be routed efficiently and securely

through the VM-Series firewalls deployed in the Security VPC.

Reference: Palo Alto Networks provides best practices for using transit gateways and Security VPCs to

enhance HA and security in AWS environments.

Palo Alto Networks AWS Design Guide Transit VPC and Security VPC:

Another recommended approach is to use a Transit VPC along with a Security VPC. The Transit VPC

provides a centralized routing hub, while the Security VPC hosts the VM-Series firewalls to inspect and

secure outbound traffic.

Reference: The design guide for AWS deployments recommends this architecture to achieve scalable and

resilient HA configurations.

Palo Alto Networks AWS Transit VPC Guide