Firewall MX CONNECTION BGP AWS

[hvalles]

Good day, community,

I have two MX firewalls in HA that I want to connect to AWS, where our SAP server is hosted.

The requirement is to establish the connection using BGP. I have found that, starting from MX version 18, it is possible to use eBGP without switching to VPN concentrator mode, allowing the MX firewalls to remain in NAT mode.

Additionally, I discovered that for AWS to support BGP, it requires the AWS Transit Gateway service.

This service allows setting up an IPsec VPN with the MX firewalls, and within the IPsec tunnel, BGP can be used.

I would like to know if anyone has had a similar experience with this type of integration or connection.

Thanks in advance!

[GreenMan]

I suspect this is pretty new - I have a feeling AWS previously supported only GRE tunnels - which MX does not support.   I'd be equally interested to hear abut real-world deployments using this.