This document provides guidance on deploying an AOS-CX powered L2 EVPN VXLAN network with Palo Alto Networks Firewalls.