38
VM-Series
Deployment
Guide
Secure North-South Traffic with the VM-Series Firewall
Set Up a VM-Series Firewall on the Citrix SDX Server
Deploy the VM-Series Firewall Before the NetScaler VPX
The following example shows how to deploy the VM-Series firewall to process and secure traffic before it
reaches the NetScaler VPX. In this example, the VM-Series firewall is deployed with virtual wire interfaces, and
the client connection requests are destined to the VIP on the NetScaler VPX. Note that you can deploy the
VM-Series firewall using L2 or L3 interfaces, based on your specific needs.
Topology Before Adding the VM-Series Firewall
Topology after adding the VM-Series firewall
The following table includes the basic configuration tasks you must perform on the VM-Series firewall. For
firewall configuration instructions refer to the
PAN-OS documentation
. The workflow and configuration on
the NetScaler VPX is beyond the scope of this document; for details on configuring the NetScaler VPX, refer
to the Citrix documentation.
