{"id":3760,"date":"2022-05-11T21:38:26","date_gmt":"2022-05-12T05:38:26","guid":{"rendered":"https:\/\/tungle.ca\/?p=3760"},"modified":"2022-10-19T19:37:38","modified_gmt":"2022-10-20T03:37:38","slug":"deploying-palo-alto-firewall-on-gcp","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=3760","title":{"rendered":"Deploying Palo Alto Firewall on Google Cloud Platform"},"content":{"rendered":"\n<p>This is a diagram that I have used in this lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/10\/image-31.png\" alt=\"\" class=\"wp-image-4278\" width=\"517\" height=\"457\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/10\/image-31.png 726w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/10\/image-31-300x265.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/10\/image-31-200x177.png 200w\" sizes=\"auto, (max-width: 517px) 100vw, 517px\" \/><\/figure>\n\n\n\n<p>Below are several main steps in this lab:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Create 3 vpc networks: vpc-mgmt (10.0.0.0\/24), vpc-outside (10.0.1.0\/24), and vpc-inside (10.0.2.0\/24) on GCP.<\/li><li>Create ingress\/egress Firewall rules on the vpc networks.<\/li><li>Launch Palo Alto instance on GCP.<\/li><li>Launch Windows 2016 instance on the inside network.<\/li><li>Create a default route, security rules, SNAT, and DNAT for RDP traffic from the Internet to Windows 2016 instance via Palo Alto.<\/li><li>Modify the default route for the inside network to use the Palo Alto instance.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"726\" height=\"923\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-57.png\" alt=\"\" class=\"wp-image-3762\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-57.png 726w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-57-236x300.png 236w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-57-157x200.png 157w\" sizes=\"auto, (max-width: 726px) 100vw, 726px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"842\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59-1024x842.png\" alt=\"\" class=\"wp-image-3764\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59-1024x842.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59-300x247.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59-768x631.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59-200x164.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-59.png 1096w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"722\" height=\"852\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-61.png\" alt=\"\" class=\"wp-image-3766\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-61.png 722w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-61-254x300.png 254w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-61-169x200.png 169w\" sizes=\"auto, (max-width: 722px) 100vw, 722px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"725\" height=\"868\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-60.png\" alt=\"\" class=\"wp-image-3765\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-60.png 725w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-60-251x300.png 251w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-60-167x200.png 167w\" sizes=\"auto, (max-width: 725px) 100vw, 725px\" \/><\/figure>\n\n\n\n<p>VPC Network &#8211; Route tables.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"403\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62-1024x403.png\" alt=\"\" class=\"wp-image-3767\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62-1024x403.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62-300x118.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62-768x302.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62-200x79.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-62.png 1325w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to VPC network &#8211; Firewall &#8211; Create a firewall rule for ingress\/egress traffic from and to the network 0.0.0.0\/0.<\/p>\n\n\n\n<p>The ingress-mgmt rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"810\" height=\"897\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-63.png\" alt=\"\" class=\"wp-image-3768\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-63.png 810w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-63-271x300.png 271w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-63-768x850.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-63-181x200.png 181w\" sizes=\"auto, (max-width: 810px) 100vw, 810px\" \/><\/figure>\n\n\n\n<p>The egress-mgmt rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"847\" height=\"876\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-64.png\" alt=\"\" class=\"wp-image-3769\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-64.png 847w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-64-290x300.png 290w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-64-768x794.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-64-193x200.png 193w\" sizes=\"auto, (max-width: 847px) 100vw, 847px\" \/><\/figure>\n\n\n\n<p>The ingress-outside rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"769\" height=\"897\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-65.png\" alt=\"\" class=\"wp-image-3770\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-65.png 769w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-65-257x300.png 257w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-65-171x200.png 171w\" sizes=\"auto, (max-width: 769px) 100vw, 769px\" \/><\/figure>\n\n\n\n<p>The egress-outside rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"740\" height=\"847\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-69.png\" alt=\"\" class=\"wp-image-3774\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-69.png 740w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-69-262x300.png 262w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-69-175x200.png 175w\" sizes=\"auto, (max-width: 740px) 100vw, 740px\" \/><\/figure>\n\n\n\n<p>The ingress-inside rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"762\" height=\"849\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-68.png\" alt=\"\" class=\"wp-image-3773\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-68.png 762w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-68-269x300.png 269w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-68-180x200.png 180w\" sizes=\"auto, (max-width: 762px) 100vw, 762px\" \/><\/figure>\n\n\n\n<p>The egress-inside rule.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"861\" height=\"894\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-70.png\" alt=\"\" class=\"wp-image-3775\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-70.png 861w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-70-289x300.png 289w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-70-768x797.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-70-193x200.png 193w\" sizes=\"auto, (max-width: 861px) 100vw, 861px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"538\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71-1024x538.png\" alt=\"\" class=\"wp-image-3776\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71-1024x538.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71-300x158.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71-768x404.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71-200x105.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-71.png 1345w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to Compute Engine &#8211; Create an instance &#8211; Marketplace &#8211; enter &#8220;Palo Alto&#8221; &#8211; select &#8220;VM-series Next-Generation Firewall (Bundle 1)&#8221; &#8211; click launch.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"542\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72-1024x542.png\" alt=\"\" class=\"wp-image-3777\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72-1024x542.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72-300x159.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72-768x407.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72-200x106.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-72.png 1286w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click Enable on the Required APIs.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"706\" height=\"246\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-73.png\" alt=\"\" class=\"wp-image-3778\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-73.png 706w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-73-300x105.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-73-200x70.png 200w\" sizes=\"auto, (max-width: 706px) 100vw, 706px\" \/><\/figure>\n\n\n\n<p>Back to create Palo Alto VM.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"996\" height=\"781\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-80.png\" alt=\"\" class=\"wp-image-3785\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-80.png 996w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-80-300x235.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-80-768x602.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-80-200x157.png 200w\" sizes=\"auto, (max-width: 996px) 100vw, 996px\" \/><\/figure>\n\n\n\n<p>Using the puttygen to generate an SSH key pair. Click to save the public and private keys.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"575\" height=\"453\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-75.png\" alt=\"\" class=\"wp-image-3780\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-75.png 575w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-75-300x236.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-75-200x158.png 200w\" sizes=\"auto, (max-width: 575px) 100vw, 575px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"754\" height=\"224\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-76.png\" alt=\"\" class=\"wp-image-3781\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-76.png 754w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-76-300x89.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-76-200x59.png 200w\" sizes=\"auto, (max-width: 754px) 100vw, 754px\" \/><\/figure>\n\n\n\n<p>This is a public key that you need to submit when creating the Palo Alto VM on GCP.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"958\" height=\"183\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-78.png\" alt=\"\" class=\"wp-image-3783\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-78.png 958w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-78-300x57.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-78-768x147.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-78-200x38.png 200w\" sizes=\"auto, (max-width: 958px) 100vw, 958px\" \/><\/figure>\n\n\n\n<p>Copy the key and pass it into the SSH key.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"489\" height=\"643\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-79.png\" alt=\"\" class=\"wp-image-3784\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-79.png 489w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-79-228x300.png 228w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-79-152x200.png 152w\" sizes=\"auto, (max-width: 489px) 100vw, 489px\" \/><\/figure>\n\n\n\n<p>Select the interfaces like the following screenshot. Then, click &#8220;Deploy&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"948\" height=\"841\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-82.png\" alt=\"\" class=\"wp-image-3787\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-82.png 948w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-82-300x266.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-82-768x681.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-82-200x177.png 200w\" sizes=\"auto, (max-width: 948px) 100vw, 948px\" \/><\/figure>\n\n\n\n<p>Wait a couple of minutes to see the &#8220;Palo Alto has been deployed&#8221; notification.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"635\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83-1024x635.png\" alt=\"\" class=\"wp-image-3788\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83-1024x635.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83-768x476.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83-200x124.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-83.png 1163w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p> <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"723\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84-1024x723.png\" alt=\"\" class=\"wp-image-3789\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84-1024x723.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84-300x212.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84-768x542.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84-200x141.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-84.png 1224w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Get the external IP address of mgmt and outside interfaces. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1005\" height=\"783\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-85.png\" alt=\"\" class=\"wp-image-3790\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-85.png 1005w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-85-300x234.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-85-768x598.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-85-200x156.png 200w\" sizes=\"auto, (max-width: 1005px) 100vw, 1005px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"421\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86-1024x421.png\" alt=\"\" class=\"wp-image-3791\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86-1024x421.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86-300x123.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86-768x316.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86-200x82.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-86.png 1210w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Compute Engine &#8211; VM instances &#8211; paloalto-vm1.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"413\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94-1024x413.png\" alt=\"\" class=\"wp-image-3799\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94-1024x413.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94-300x121.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94-768x310.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94-200x81.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-94.png 1469w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Click Edit.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"819\" height=\"682\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-95.png\" alt=\"\" class=\"wp-image-3800\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-95.png 819w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-95-300x250.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-95-768x640.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-95-200x167.png 200w\" sizes=\"auto, (max-width: 819px) 100vw, 819px\" \/><\/figure>\n\n\n\n<p> <\/p>\n\n\n\n<p>Reserve the static IP address 10.0.0.2, 10.0.1.2 and 10.0.2.2 for mgmt, outside and inside network on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"828\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96-1024x828.png\" alt=\"\" class=\"wp-image-3801\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96-1024x828.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96-300x243.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96-768x621.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96-200x162.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-96.png 1050w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"773\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97-1024x773.png\" alt=\"\" class=\"wp-image-3802\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97-1024x773.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97-300x226.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97-768x580.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97-200x151.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-97.png 1048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"753\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-98.png\" alt=\"\" class=\"wp-image-3803\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-98.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-98-300x221.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-98-768x565.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-98-200x147.png 200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Open Putty and load the private key that you have saved in the previous step.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"446\" height=\"431\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-87.png\" alt=\"\" class=\"wp-image-3792\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-87.png 446w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-87-300x290.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-87-200x193.png 200w\" sizes=\"auto, (max-width: 446px) 100vw, 446px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"434\" height=\"434\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-88.png\" alt=\"\" class=\"wp-image-3793\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-88.png 434w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-88-300x300.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-88-150x150.png 150w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-88-200x200.png 200w\" sizes=\"auto, (max-width: 434px) 100vw, 434px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"419\" height=\"235\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-89.png\" alt=\"\" class=\"wp-image-3794\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-89.png 419w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-89-300x168.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-89-200x112.png 200w\" sizes=\"auto, (max-width: 419px) 100vw, 419px\" \/><figcaption>Set password for the admin user and commit.<\/figcaption><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>configure\nset mgt-config users admin password\ncommit<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"554\" height=\"380\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-92.png\" alt=\"\" class=\"wp-image-3797\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-92.png 554w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-92-300x206.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-92-200x137.png 200w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<p>Open your web browser and enter https:\/\/35.223.135.68.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"965\" height=\"530\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-93.png\" alt=\"\" class=\"wp-image-3798\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-93.png 965w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-93-300x165.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-93-768x422.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-93-200x110.png 200w\" sizes=\"auto, (max-width: 965px) 100vw, 965px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"599\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99-1024x599.png\" alt=\"\" class=\"wp-image-3804\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99-1024x599.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99-300x175.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99-768x449.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99-200x117.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-99.png 1125w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"716\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100-1024x716.png\" alt=\"\" class=\"wp-image-3805\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100-1024x716.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100-768x537.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100-200x140.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-100.png 1125w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"598\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101-1024x598.png\" alt=\"\" class=\"wp-image-3806\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101-1024x598.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101-300x175.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101-768x449.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101-200x117.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-101.png 1116w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"723\" height=\"459\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-102.png\" alt=\"\" class=\"wp-image-3807\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-102.png 723w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-102-300x190.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-102-200x127.png 200w\" sizes=\"auto, (max-width: 723px) 100vw, 723px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"714\" height=\"475\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-103.png\" alt=\"\" class=\"wp-image-3808\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-103.png 714w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-103-300x200.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-103-200x133.png 200w\" sizes=\"auto, (max-width: 714px) 100vw, 714px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"421\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104-1024x421.png\" alt=\"\" class=\"wp-image-3809\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104-1024x421.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104-300x123.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104-768x316.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104-200x82.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-104.png 1111w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a default route on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"681\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105-1024x681.png\" alt=\"\" class=\"wp-image-3810\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105-1024x681.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105-300x200.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105-768x511.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105-200x133.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-105.png 1163w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to Compute Engine &#8211; Create a new Windows 2016 VM.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"717\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106-1024x717.png\" alt=\"\" class=\"wp-image-3811\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106-1024x717.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106-768x537.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106-200x140.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-106.png 1186w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>On External IP address, change from ephemeral to None. Then, click to create a VM.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"536\" height=\"452\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-107.png\" alt=\"\" class=\"wp-image-3812\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-107.png 536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-107-300x253.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-107-200x169.png 200w\" sizes=\"auto, (max-width: 536px) 100vw, 536px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"408\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108-1024x408.png\" alt=\"\" class=\"wp-image-3813\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108-1024x408.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108-300x120.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108-768x306.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108-200x80.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-108.png 1462w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Back to the VPC network &#8211; Routes to change the default route of the inside network to the Palo Alto instance. Delete the highlighted route as the screenshot below.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"711\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109-1024x711.png\" alt=\"\" class=\"wp-image-3814\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109-1024x711.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109-300x208.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109-768x533.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109-200x139.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-109.png 1279w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a new default route, and change the next hop instance from the internet gateway to use the Palo Alto instance.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"966\" height=\"751\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-110.png\" alt=\"\" class=\"wp-image-3815\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-110.png 966w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-110-300x233.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-110-768x597.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-110-200x155.png 200w\" sizes=\"auto, (max-width: 966px) 100vw, 966px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"630\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120-1024x630.png\" alt=\"\" class=\"wp-image-3825\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120-1024x630.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120-300x185.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120-768x473.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120-200x123.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-120.png 1334w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a new Windows 2016 instance object on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"772\" height=\"242\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-113.png\" alt=\"\" class=\"wp-image-3818\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-113.png 772w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-113-300x94.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-113-768x241.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-113-200x63.png 200w\" sizes=\"auto, (max-width: 772px) 100vw, 772px\" \/><\/figure>\n\n\n\n<p>Create both access rules to allow traffic from the inside network to the outside, and from the Internet to the Windows 2016 VM.<\/p>\n\n\n\n<p>The outside network to RDP service on the inside network.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"964\" height=\"598\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-125.png\" alt=\"\" class=\"wp-image-3830\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-125.png 964w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-125-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-125-768x476.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-125-200x124.png 200w\" sizes=\"auto, (max-width: 964px) 100vw, 964px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"297\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131-1024x297.png\" alt=\"\" class=\"wp-image-3836\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131-1024x297.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131-300x87.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131-768x222.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131-200x58.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-131.png 1367w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create SNAT to allow traffic from the inside network to the outside network via the Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"272\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116-1024x272.png\" alt=\"\" class=\"wp-image-3821\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116-1024x272.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116-300x80.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116-768x204.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116-200x53.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-116.png 1354w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a DNAT rule to allow RDP traffic from the Internet to Palo Alto and DNAT to Windows 2016 instance.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"778\" height=\"380\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-118.png\" alt=\"\" class=\"wp-image-3823\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-118.png 778w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-118-300x147.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-118-768x375.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-118-200x98.png 200w\" sizes=\"auto, (max-width: 778px) 100vw, 778px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"550\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121-1024x550.png\" alt=\"\" class=\"wp-image-3826\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121-1024x550.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121-300x161.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121-768x413.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121-200x108.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-121.png 1146w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"787\" height=\"305\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-117.png\" alt=\"\" class=\"wp-image-3822\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-117.png 787w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-117-300x116.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-117-768x298.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-117-200x78.png 200w\" sizes=\"auto, (max-width: 787px) 100vw, 787px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"264\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122-1024x264.png\" alt=\"\" class=\"wp-image-3827\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122-1024x264.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122-300x77.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122-768x198.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122-200x51.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-122.png 1177w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click commit.<\/p>\n\n\n\n<p>Open RDP on a Windows machine and enter the public IP address of the vpc-outside network on Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"515\" height=\"417\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-124.png\" alt=\"\" class=\"wp-image-3829\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-124.png 515w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-124-300x243.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-124-200x162.png 200w\" sizes=\"auto, (max-width: 515px) 100vw, 515px\" \/><\/figure>\n\n\n\n<p>Enter your username and password.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"727\" height=\"310\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-128.png\" alt=\"\" class=\"wp-image-3833\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-128.png 727w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-128-300x128.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-128-200x85.png 200w\" sizes=\"auto, (max-width: 727px) 100vw, 727px\" \/><figcaption>We can see the RDP traffic in Palo Alto.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"531\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129-1024x531.png\" alt=\"\" class=\"wp-image-3834\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129-1024x531.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129-300x156.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129-768x398.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129-200x104.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-129.png 1408w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>The Windows instance is able to access the Internet via Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"885\" height=\"516\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-132.png\" alt=\"\" class=\"wp-image-3837\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-132.png 885w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-132-300x175.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-132-768x448.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-132-200x117.png 200w\" sizes=\"auto, (max-width: 885px) 100vw, 885px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"882\" height=\"495\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-133.png\" alt=\"\" class=\"wp-image-3838\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-133.png 882w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-133-300x168.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-133-768x431.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/05\/image-133-200x112.png 200w\" sizes=\"auto, (max-width: 882px) 100vw, 882px\" \/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>This is a diagram that I have used in this lab. Below are several main steps in this lab: Create 3 vpc networks: vpc-mgmt (10.0.0.0\/24), vpc-outside (10.0.1.0\/24), and vpc-inside (10.0.2.0\/24) on GCP. Create ingress\/egress Firewall rules on the vpc networks. Launch Palo Alto instance on GCP. Launch Windows 2016 instance on the inside network. Create [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,21],"tags":[20,18],"class_list":["post-3760","post","type-post","status-publish","format-standard","hentry","category-cloud","category-palo-alto","tag-cloud","tag-palo-alto"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3760","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3760"}],"version-history":[{"count":6,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3760\/revisions"}],"predecessor-version":[{"id":4279,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3760\/revisions\/4279"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3760"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3760"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3760"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}