FireNet

This section provides the purpose, elements, and actions performed on the FireNet pages.

FireNet
Firewall

Purpose

The FireNet page provides centralized management for firewall insertion into Aviatrix Transit architecture, enabling advanced security inspection across multi-cloud environments.

Controller version 9.0 extends IPv6 FireNet vendor support to Fortinet and Check Point, in addition to Palo Alto Networks (supported from Controller version 8.2).

Elements

FireNet Table: Displays FireNet instances, associated Transit Gateways, and firewall status.
Diagnostics Tools: Ping, trace, and log viewer for troubleshooting.
Firewall Count & Status: Shows number of firewalls attached and their operational state.

Actions

View FireNet

To view FireNet instances and their status:

Go to Security > FireNet > FireNet.
The FireNet page appears with the FireNet Table showing instances, associated Transit Gateways, and firewall status.
Review Firewall Count & Status for each FireNet instance.
Optionally, use Topology View for a visual representation of FireNet connectivity.

The FireNet Table displays FireNet instances and their operational state across multi-cloud environments.

Parameter Details

CoPilot Parameter Name	Description
FireNet Name	Unique identifier for the FireNet instance.
Transit Gateway	Transit Gateway associated with the FireNet.
Firewall Count	Number of firewalls attached to the FireNet.
Status	Operational state of the FireNet instance.
Topology View	Visual representation of FireNet connectivity.

Vendor Integration through Firewall Manager

Before configuring vendor integration through Firewall Manager, ensure you have:

A Transit FireNet gateway with firewall instances attached
(For Palo Alto Networks Panorama) Panorama management IP address and administrator credentials
(For Palo Alto Networks Panorama) Panorama template and template stack names to assign to each firewall

To configure vendor integration through Firewall Manager:

Go to Security > FireNet > FireNet.
In the FireNet Gateways list, locate the Transit FireNet gateway that contains the firewall you want to configure.
In that gateway row, click the vertical ellipsis (⋮) icon, and then click Manage Vendor Integration.
The Vendor Integration dialog appears.
Click Through Firewall Manager as the integration path.
In Firewall Manager Vendor, click the Firewall Manager Vendor dropdown. Select Palo Alto Networks Panorama to configure Custom Firewall Mapping.
In Management IP Address, enter the management IP address of the Panorama instance.
In Username, enter the Panorama administrator username.
In Password, enter the corresponding password.
In FireNet Instance Template Name, select or enter the template to assign to this firewall.
Enable Custom Firewall Mapping to configure more than one firewall template.
Click Save.

A notification appears confirming the vendor integration configuration. |

Use FireNet Diagnostics

To run FireNet diagnostics for troubleshooting:

Go to Security > FireNet > FireNet.
Locate the FireNet instance in the FireNet Table.
Use Diagnostics Tools to run Ping, trace, or log viewer for the selected instance.

Diagnostics help troubleshoot connectivity and operational issues with FireNet instances.

Purpose

The Firewall page manages firewall instances integrated with FireNet, including lifecycle operations and policy enforcement.

Elements

Firewall Table: Lists firewall name, vendor type (e.g., Palo Alto, Check Point), and HA status.
Attach/Detach Workflow: Allows adding or removing firewalls from FireNet.
Policy Panel: Displays applied security policies and rule sets.
Performance Metrics: Shows CPU, memory, and throughput for firewall instances.

Actions

View Firewalls

To view firewall instances integrated with FireNet:

Go to Security > FireNet > Firewall.
The Firewall page appears with the Firewall Table listing firewall name, vendor type, and HA status.
Review Policy Panel for applied security policies and Performance Metrics for CPU, memory, and throughput.

The Firewall Table displays firewall instances and their integration status with FireNet.

Parameter Details

CoPilot Parameter Name	Description
Name	Displays the name of the firewall instance.
Instance ID	Displays the cloud provider instance ID of the firewall.
VPC/VNet	Displays the VPC or VNet where the firewall is deployed.
Vendor	Displays the firewall vendor.
Vendor Integration	Displays the integration type used with the firewall vendor.
Association	Displays the association status between the firewall and FireNet or gateways.
Management Private IP	Displays the private IP address used to manage the firewall.
Management UI	Provides access to the firewall management user interface.

Attach Firewall to FireNet

To attach a firewall to FireNet:

Go to Security > FireNet > Firewall.
Use the Attach/Detach Workflow to add a firewall to FireNet.
Follow the workflow to select the firewall and complete the attachment.

The firewall is attached to FireNet and appears in the Firewall Table.

Detach Firewall from FireNet

To detach a firewall from FireNet:

Go to Security > FireNet > Firewall.
Locate the firewall in the Firewall Table.
Use the Attach/Detach Workflow to remove the firewall from FireNet.
Confirm the detachment.

The firewall is detached from FireNet.

Access Firewall Management UI

To access the firewall management user interface:

Go to Security > FireNet > Firewall.
Locate the firewall in the Firewall Table.
Click Management UI for the firewall instance.

The firewall vendor management interface opens in a new window.

Concepts & Architecture

Guides

Reference

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details