Hey all, There is currently a bug in the implementation of egress firewall rules in the Palo Alto plugin.
Here is the bug: https://issues.apache.org/jira/browse/CLOUDSTACK-5425 I have attached a patch for the 4.3 branch in the bug, but I don't think I have commit access, so I will need someone else to apply it. The patch 'should' work on both 4.3 and master, but if not, I will put together a patch for master. In this patch I have also addressed 'Issue 1' in this email thread: http://markmail.org/message/32tspuyjppk4llmi?q=list:org%2Eapache%2Eincubator%2Ecloudstack-%2A+Coverage+Analysis:+Few+Issues Let me know if you have any questions... Cheers, Will