> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FireNet

> This section provides the purpose, elements, and actions performed on the FireNet pages.

This section provides the purpose, elements, and actions performed on the
**FireNet** pages.

<Tabs>
  <Tab title="FireNet">
    ## Purpose

    The **FireNet** page provides centralized management for firewall insertion into Aviatrix Transit architecture, enabling advanced security inspection across multi-cloud environments.

    <Note>
      Controller version 9.0 extends IPv6 FireNet vendor support to Fortinet and Check Point, in addition to Palo Alto Networks (supported from Controller version 8.2).
    </Note>

    ## Elements

    <Frame>
      <img src={"/images/reference/ui/security/firenet-overview.png"} alt="FireNet: FireNet" width="100%" />
    </Frame>

    * **FireNet Table**: Displays FireNet instances, associated Transit Gateways,
      and firewall status.
    * **Diagnostics Tools**: Ping, trace, and log viewer for troubleshooting.
    * **Firewall Count & Status**: Shows number of firewalls attached and their
      operational state.

    ## Actions

    <AccordionGroup>
      <Accordion title="View FireNet">
        To view FireNet instances and their status:

        1. Go to **Security** > **FireNet** > **FireNet**.
        2. The FireNet page appears with the FireNet Table showing instances, associated Transit Gateways, and firewall status.
        3. Review Firewall Count & Status for each FireNet instance.
        4. Optionally, use **Topology View** for a visual representation of FireNet connectivity.

        The FireNet Table displays FireNet instances and their operational state across
        multi-cloud environments.

        ### Parameter Details

        | CoPilot Parameter Name | Description                                    |
        | ---------------------- | ---------------------------------------------- |
        | FireNet Name           | Unique identifier for the FireNet instance.    |
        | Transit Gateway        | Transit Gateway associated with the FireNet.   |
        | Firewall Count         | Number of firewalls attached to the FireNet.   |
        | Status                 | Operational state of the FireNet instance.     |
        | Topology View          | Visual representation of FireNet connectivity. |
      </Accordion>

      <Accordion title="Vendor Integration through Firewall Manager">
        Before configuring vendor integration through Firewall Manager, ensure you have:

        * A Transit FireNet gateway with firewall instances attached
        * (For Palo Alto Networks Panorama) Panorama management IP address and administrator credentials
        * (For Palo Alto Networks Panorama) Panorama template and template stack names to assign to each firewall

        To configure vendor integration through Firewall Manager:

        1. Go to **Security** > **FireNet** > **FireNet**.
        2. In the FireNet Gateways list, locate the Transit FireNet gateway that contains the firewall you want to configure.
        3. In that gateway row, click the vertical ellipsis (⋮) icon, and then click
           **Manage Vendor Integration**.<br />The **Vendor Integration** dialog appears.
        4. Click **Through Firewall Manager** as the integration path.
        5. In **Firewall Manager Vendor**, click the **Firewall Manager Vendor** dropdown. Select **Palo Alto Networks Panorama** to configure **Custom Firewall Mapping**.
        6. In **Management IP Address**, enter the management IP address of the Panorama instance.
        7. In **Username**, enter the Panorama administrator username.
        8. In **Password**, enter the corresponding password.
        9. In **FireNet Instance Template Name**, select or enter the template to assign to this firewall.<br />Enable **Custom Firewall Mapping** to configure more than one firewall template.
        10. Click **Save**.

        A notification appears confirming the vendor integration configuration.                      |
      </Accordion>

      <Accordion title="Use FireNet Diagnostics">
        To run FireNet diagnostics for troubleshooting:

        1. Go to **Security** > **FireNet** > **FireNet**.
        2. Locate the FireNet instance in the FireNet Table.
        3. Use **Diagnostics Tools** to run Ping, trace, or log viewer for the selected instance.

        Diagnostics help troubleshoot connectivity and operational issues with FireNet
        instances.
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Firewall">
    ## Purpose

    The **Firewall** page manages firewall instances integrated with FireNet,
    including lifecycle operations and policy enforcement.

    ## Elements

    <Frame>
      <img src={"/images/reference/ui/security/firenet-firewall.png"} alt="FireNet: Firewall" width="100%" />
    </Frame>

    * **Firewall Table**: Lists firewall name, vendor type (e.g., Palo Alto, Check
      Point), and HA status.
    * **Attach/Detach Workflow**: Allows adding or removing firewalls from FireNet.
    * **Policy Panel**: Displays applied security policies and rule sets.
    * **Performance Metrics**: Shows CPU, memory, and throughput for firewall
      instances.

    ## Actions

    <AccordionGroup>
      <Accordion title="View Firewalls">
        To view firewall instances integrated with FireNet:

        1. Go to **Security** > **FireNet** > **Firewall**.
        2. The Firewall page appears with the Firewall Table listing firewall name, vendor type, and HA status.
        3. Review **Policy Panel** for applied security policies and **Performance Metrics** for CPU, memory, and throughput.

        The Firewall Table displays firewall instances and their integration status with
        FireNet.

        ### Parameter Details

        | CoPilot Parameter Name | Description                                                                   |
        | ---------------------- | ----------------------------------------------------------------------------- |
        | Name                   | Displays the name of the firewall instance.                                   |
        | Instance ID            | Displays the cloud provider instance ID of the firewall.                      |
        | VPC/VNet               | Displays the VPC or VNet where the firewall is deployed.                      |
        | Vendor                 | Displays the firewall vendor.                                                 |
        | Vendor Integration     | Displays the integration type used with the firewall vendor.                  |
        | Association            | Displays the association status between the firewall and FireNet or gateways. |
        | Management Private IP  | Displays the private IP address used to manage the firewall.                  |
        | Management UI          | Provides access to the firewall management user interface.                    |
      </Accordion>

      <Accordion title="Attach Firewall to FireNet">
        To attach a firewall to FireNet:

        1. Go to **Security** > **FireNet** > **Firewall**.
        2. Use the **Attach/Detach Workflow** to add a firewall to FireNet.
        3. Follow the workflow to select the firewall and complete the attachment.

        The firewall is attached to FireNet and appears in the Firewall Table.
      </Accordion>

      <Accordion title="Detach Firewall from FireNet">
        To detach a firewall from FireNet:

        1. Go to **Security** > **FireNet** > **Firewall**.
        2. Locate the firewall in the Firewall Table.
        3. Use the **Attach/Detach Workflow** to remove the firewall from FireNet.
        4. Confirm the detachment.

        The firewall is detached from FireNet.
      </Accordion>

      <Accordion title="Access Firewall Management UI">
        To access the firewall management user interface:

        1. Go to **Security** > **FireNet** > **Firewall**.
        2. Locate the firewall in the Firewall Table.
        3. Click **Management UI** for the firewall instance.

        The firewall vendor management interface opens in a new window.
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>
