Technical requirements

For this chapter, a basic working experience with Palo Alto firewalls is helpful, as topics such as security zones and IPSec configuration will be very similar to what is configured on the hardware of a VM firewall.

Before we can get started, we need to verify if the appropriate licenses have been attached to the tenant so that RN-SPNs can be spun up. On the Strata Cloud Manager, the licenses are listed on the Overview, which is the first page you see when you access https://stratacloudmanager.paloaltonetworks.com/.

At the bottom right side, you should see an allotment of Mbps, which can be used for RN-SPNs. The screenshot below shows a tenant that has 200 Mbps available for remote networks:

Figure 5.1 – Strata Cloud Manager Overview

In Panorama, you can find the licenses in Panorama | Licenses.

The following is a screenshot of licenses in Panorama:

Figure 5.2 – Licenses in Panorama...