Implementation

This implementation requires the following resources:

  • fp-ngfw-aws-TransitGateway-autoscaling.zip available at this link: https://frcpnt.com/fp-ngfw-aws-transitgateway-latest.
  • A single VPC, which is created during the CloudFormation deployment workflow.
  • Multiple Elastic IPs in AWS (based on number of engines running).

Note: The standard limit for each AWS region is 5 VPCs and 5 Elastic IPs (EIP), therefore the region chosen for the deployment must allow to create a new VPC and new EIPs (you can contact AWS support to check if the limit of creating new VPC and EIPs can be increased.).

This implementation has been tested working with the following requirements:

  • Ubuntu 20.04.1 LTS (with at least 2 GB RAM and 20 GB free disk space).
  • Python 3.8
  • The following Python modules:
    • fp-NGFW-SMC-python
    • crhelper
    • xmltodict
    • boto3