Distribute Tunnel Interfaces to converted Virtual Firewall elements

If Tunnel Interfaces are defined for the Single Firewall or Firewall Cluster element on which the configuration is based, you must move the Tunnel Interfaces into the interface configuration for the Virtual Firewall elements.

Master NGFW Engines cannot use Tunnel Interfaces.

For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Review the distribution of Tunnel Interfaces to Virtual NGFW Engines.
  2. (Optional) If you want to change how the Tunnel Interfaces are distributed to Virtual NGFW Engines, click the Virtual Engine field for a Tunnel Interface and select the correct Virtual NGFW Engine from the list.
  3. Click Next and continue the configuration in one of the following ways:
    • If the Single Firewall or Firewall Cluster on which the configuration is based is associated with a VPN Gateway element, the Review Distribution of Internal Gateways to Virtual NGFW Engines page opens. Move the VPN Gateway elements into the configuration for the Virtual NGFW Engines.
    • Otherwise, the Define Routing for the Master NGFW Engine page opens. Define routing for the converted Master NGFW Engines.