Specifications

34 VM-Series Deployment Guide
Secure North-South Traffic with the VM-Series Firewall Set Up a VM-Series Firewall on the Citrix SDX Server
Topology After Adding the VM-Series Firewall
The following table includes the tasks you must perform to deploy the VM-Series firewall. For firewall
configuration instructions refer to the
PAN-OS Documentation. The workflow and configuration on the
NetScaler VPX is beyond the scope of this document; for details on configuring the NetScaler VPX, refer to
the Citrix documentation.
Set up the VM-Series Firewall to Process North-South Traffic Using L3 interfaces
Step 1 Install the VM-Series Firewall on the
SDX Server.
When provisioning the VM-Series firewall on the SDX server, you
must ensure that you select the data interface accurately so that the
firewall can access the server(s).
Step 2 Configure the data interface on the
firewall.
1. Select
Network > Virtual Router and then select the default
link to open the Virtual Router dialog and
Add the interface to
the virtual router.
2. (Required only if the USIP option is enabled on the NetScaler
VPX) On the
Static Routes tab on the virtual router, select the
interface and add the NetScaler SNIP (192.68.1.1 in this
example) as the
Next Hop. The static route defined here will be
used to route traffic from the firewall to the NetScaler VPX.
3. Select
Network > Interfaces> Ethernet and then select the
interface you want to configure.
4. Select the
Interface Type. Although your choice here depends
on your network topology, this example uses
Layer3.
5. On the
Config tab, in the Virtual Router drop-down, select
default.
6. Select
New Zone from the Security Zone drop-down. In the
Zone dialog, define a
Name for new zone, for example default,
and then click
OK.
7. Select the
IPv4 or IPv6 tab, click Add in the IP section, and enter
two IP addresses and network mask to the interface—one for
each subnet that is being serviced. For example, 192.168.1.2 and
192.168.2.1.