Chris Wahl of Wahl Network comments:
I’ve had the opportunity to deploy a few instances of Palo Alto Network’s Panorama and VM-Series firewall into VMware NSX environments. On the whole, it’s a rather straight forward process with some deep documentation provided by the folks at Palo Alto Networks (PAN). However, they have to rely upon the code / APIs provided by someone else (VMware), meaning there are bound to be things that don’t work quite as you might imagine.
Palo Alto is the most popular option when deploying a firewall/security device with NSX. Let Chris guide you through what to do in order to save you from pain you don’t need.
This post will cover a few gotchas that have caused me grief in the past.
Read more at: Tips for Deploying Palo Alto Networks’ VM-Series Firewall with VMware NSX