Create a Rulestack on Cloud NGFW for AWS
Table of Contents
Expand all | Collapse all
-
- About Cloud NGFW for AWS
- Getting Started from the AWS Marketplace
- Register Your Cloud NGFW Tenant with a Palo Alto Networks Support Account
- Cloud NGFW for AWS Pricing
- Cloud NGFW Credit Distribution and Management
- Link Your PAYG Account with Cloud NGFW Credits
- Cloud NGFW for AWS Free Trial
- Cloud NGFW for AWS Limits and Quotas
- Subscribe to Cloud NGFW for AWS
- Locate Your Cloud NGFW for AWS Serial Number
- Cross-Account Role CFT Permissions for Cloud NGFW
- Invite Users to Cloud NGFW for AWS
- Manage Cloud NGFW for AWS Users
- Deploy Cloud NGFW for AWS with the AWS Firewall Manager
- Enable Programmatic Access
- Terraform Support for Cloud NGFW AWS
- Provision Cloud NGFW Resources to your AWS CFT
- Configure Automated Account Onboarding
- Usage Explorer
- Create a Support Case
-
-
- Prepare for Panorama Integration
- Link the Cloud NGFW to Palo Alto Networks Management
- Unlink the Cloud NGFW from Palo Alto Networks Management
- Associate a Linked Panorama to the Cloud NGFW Resource
- Use Panorama for Cloud NGFW Policy Management
- View Cloud NGFW Logs and Activity in Panorama
- View Cloud NGFW Logs in Strata Logging Service
- Tag Based Policies
- Enterprise Data Loss Prevention (E-DLP) Integration with Cloud NGFW for AWS
-
- Strata Cloud Manager Policy Management
Create a Rulestack on Cloud NGFW for AWS
Author local rulestacks when you're assigned the LocalRuleStackAdmin role.
In the Cloud NGFW tenant, you can author rulestacks if you're you assigned the
LocalRuleStackAdmin or GlobalRulestackAdmin role. To author a global rulestack, you
must have used the AWS Firewall Manager to create your Cloud NGFW tenant.
When you create a local rulestack, you must specify an AWS account. The rulestack is applied to
NGFWs associated with that AWS account only. Complete the following procedure to
create a rulestack.
- Select.RulestacksCreate Rulestack
- SelectLocal RulestackorGlobal Rulestack(FMS deployment only) from the drop-down.
- Enter a descriptiveNamefor your rulestack.
- (Optional) Enter aDescriptionfor your rulestack.
- (Local Rulestack only) Select anAWS Accountfrom the drop-down.
- (Optional) ApplyTags.
- Click theAdd New.
- Enter aKeyandValue.
- ClickAdd.
- (Optional)Enable X-Forwarded-For for Security Policy. See X-Forwarded-For on Cloud NGFW for AWS for more information.
- ClickSave.
- After creating the rulestack, deploy it to the firewall.