According to the documentation, if you're creating a site to site VPN with a Palo Alto Networks firewall to AWS, you don't need to enter Proxy IDs. However, if on the AWS side you enter the Local and Remote IPv4 CIDRs, you MUST put those as Proxy IDs on the Palo Alto.

1 likes 0 replies