Azure
Welcome to the Palo Alto Networks VM-Series on Azure resource page. This area provides information about VM-Series on Microsoft Azure to help you get started or find advanced architecture designs and other resources to help accelerate your VM-Series deployment. Engage the community and ask questions in the discussion forum below.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

VM-Series on Azure Deployment Resources

Welcome to the Palo Alto Networks VM-Series on Azure resource page. This area provides information about VM-Series on Microsoft Azure to help you get started or find advanced architecture designs and other resources to help accelerate your VM-Series deployment. Engage the community and ask questions in the discussion forum below.

How to Videos and Tutorials

Note: In order to view ALL of the articles in this section and to engage in discussions on this platform, you must register for an account on LIVEcommunity. Some articles may not be viewable to unregistered users.

Register for a LIVEcommunity account

Customer Support Portal Resource

Note: In order to create a case, please create or active an account and register your device, which can be done in the Customer Support Portal. This area provides product support for all Palo Alto Networks Customers.

Login to the Customer Support Portal

Digital Learning Courses

Visit Palo Alto Networks' learning platform, Beacon, for free technical knowledge and educational resources related to all of our products.

Please note: You need to be logged into SSO in order to view this content.

Templates, Scripts and Deployment Resources

Terraform Template that deploys a two-tier containerized application on AKS secured by VM-Series

Uses a Terraform template to deploy (2) two-tiered containerized applications (Guestbook app and a WordPress server) within an AKS cluster that is protected by the VM-Series in an Application Gateway/Load Balancer sandwich.

Palo Alto Networks Community Supported

Azure-FW-4-Interfaces

Deploys a VM-Series with 4 interfaces into an existing Microsoft Azure environment.

Palo Alto Networks Community Supported

Azure-FW-3-Interfaces

Deploys a VM-Series with 3 interfaces (1-MGMT and 2-Dataplane) into an existing Microsoft Azure environment.

Palo Alto Networks Community Supported

Multiple Azure interface variations

Several ARM templates for the VM-Series with varying options including multiple interfaces.

Palo Alto Networks Community Supported

Azure-2-Firewalls-Public-Load-Balancer

Deploys a Public Azure Load Balancer in front of 2 VM-Series firewalls with the following features:

  • The 2 firewalls are deployed with 4-8 interfaces. 1 MGMT and 3-7 data plane.
  • Static IP addresses are assigned to the interfaces based on the input in the starting ip address fields.

Note: This template deploys into existing VNETs and storage accounts within the same region. As a result, the storage account and VNET must be created before deploying this template.

Palo Alto Networks Community Supported

Managed Scale and Resiliency for the VM-Series on Microsoft Azure

An ARM template that deploys two VM-Series firewalls between a pair of Azure load balancers to deliver managed scale and high availability for internet facing applications.

Using VM-Series Firewalls to Secure Internet-Facing Web Workloads

This template creates a highly available VM-Series security solution for Azure for both inbound traffic and outbound traffic. It uses VM-Series firewall pairs coupled with Azure load balancers for a fully redundant security solution.

Auto Scaling the VM-Series-firewall on Azure v1.0

Templates and scripts that deploy Azure Load Balancers and the VM-Series firewalls to deliver security for internet facing applications. Allows for protecting of new or existing workloads.

Azure Transit VNet with the VM-Series

Deploys a Hub and Spoke architecture to centralize commonly used services such as security and secure connectivity. All traffic to and from the Spokes will 'transit' the Hub VNet and will be protected by the VM-Series next generation firewall.

Azure Transit VNET architecture with auto scaling VM-Series in application spoke

Deploys a Hub and Spoke architecture to centralize commonly used services such as security and secure connectivity. All traffic to and from the Spokes will 'transit' the Hub VNET and will be protected by the VM-Series next generation firewall. Version 1.1 adds ability to do auto scaling for VM-Series to protect Internet facing applications running in a spoke VNET.

Two tier application environment protected by VM-Series

ARM template that deploys a two-tiered web/DB application environment secured by a VM-Series firewall. Template includes relevant User-Defined Route (UDR) tables to send all traffic through the VM-Series firewall.

Terraform two tier application environment protected by VM-Series

A Terraform Template that deploys two-tiered web/DB application environment secured by a VM-Series firewall.

Palo Alto Networks Community Supported

Azure VM Monitoring

Python script that harvests Azure VM properties and publishes them as IP-tag mappings that can be used in a Dynamic Address Group.

Discussions

Author Topic Views Replies
03-06-2024

VM Series Licensing Methods

Hi Team, I have an doubt regrds the BYOL and PAY AS YOU GO methods in VM series. First can i use the credits in both the methods BYOL PAYG? I...

174 2
02-22-2024

Restore Szenario for Azure PA_VM

As I'm searching for any kind of backup/restore concepts for a installed PA_VM from Marketplace in Azure, I did not find much.Scheduled config.xml ...

146 0
02-11-2024

VM Series in Azure Active/Active

Hi I would like to have this configuration (see picture) for both inbound, outbound and east west and on prem via vpn and expressroute Is that th...

323 2
02-02-2024

Hub and Spoke VPN

Hello, We have one PA firewall in azure cloud and rest we have Sophos on Mutiple sites with Dynamic IP's We want to configure Hub and spoke VPN...

426 5
01-30-2024

AWS Reference Architecture, Subnet Sizes and Automation

1. The AWS Reference Architectures (AWS - Palo Alto Networks) and associated automation libraries all use a /16 CIDR for the Security VPC and a /24...

384 1
01-25-2024

Session synchronization for Azure VM series bundle2 with Applicaion gateway

Hi TeamPublic cloud : Azure Plan : Bundle2We are planning to setup the Azure VM series Palo Alto on Azure cloud for one of the clinet and use the ...

266 0
01-30-2024

Unable to access the web end point when the VM series is deployed in Azure availibility zones

Hi Team, I initially deployed firewall VM series in no zones. Created each VM with the 3 interfaces(Management with public ip address), when It ...

323 1

Blogs

Peer Address vs Peer Identification in IPSec IKE Site to Site VPN with VM Firewall in Azure

08-03-2023 — In IPSec specifically in Phase 1 IKE, the term "peer" refers to the entity that is communicating with the local device. — Read more

Labels: Azure Cloud IPSec
5855 by in Community Blogs

New Cloud NGFW for Azure Page on LIVEcommunity!

05-03-2023 — Head to LIVEcommunity's new Cloud NGFW for Azure products page for blogs, articles, videos, and more related to this fully managed, Azure-native, NGFW service. — Read more

Labels: Azure Cloud Cloud NGFW Cloud NGFW for Azure Resources
2656 2 by in Community Blogs

3 Reasons Why You Need to Consider Cloud NGFW for Azure

05-02-2023 — Check out three reasons why you should consider Cloud NGFW for Azure, Palo Alto Networks fully managed, Azure-native, NGFW service. — Read more

Labels: Azure Cloud Cloud NGFW for Azure NGFW
4286 4 by in Community Blogs

VM-Series Virtual Firewalls Integrate with Azure Gateway Load Balancer

10-17-2022 — Azure Gateway Load Balancer helps to easily deploy, scale, and manage VM-Series firewalls referred to as Network Virtual Appliances (NVAs) in Azure. — Read more

Labels: Azure VM-Series VM-Series on Azure
6198 1 3 by in Community Blogs

Defense-in-Depth Strategy With WAF and VM-Series NGFW

08-25-2022 — A look at the capabilities of web application firewalls (WAS) and Palo Alto Networks' VM-Series NGFW when working together and apart. — Read more

Labels: AWS Azure Cloud NGFW VM-Series
7849 6 by in Community Blogs

Articles

Here's What You Missed — June Rewind

07-01-2021 — Catch up on everything the LIVEcommunity was up to during the month of June! — Read more

Labels: Community News VM-Series on Azure
3533 1 by in News

Open Source VM-Series Terraform Modules

05-04-2021 — A set of modules for using Palo Alto Networks VM-Series firewalls to provide control and protection to your applications running on Azure Cloud. — Read more

Labels: Strata Configure Strata Deploy Terraform VM-Series VM-Series on Azure
4971 by in Quickplay Solutions Archived Articles

Here's What You Missed - April Rewind

05-03-2021 — LIVEcommunity April Rewind It’s a new month so you know what that means… time for our monthly rewind! Let’s take a look back at April and see all of the exciting announcements and initiatives shared on the LIVEcommunity. It's Here - The Enhanced LIVEcommunity Experience The enhanced LIVEco... — Read more

Labels: April Community Community Updates News VM-Series on Azure
3509 1 by in News

Firewall VM-Series

10-15-2020 — Firewall VM-Series: Overview (2 hrs) AWS (1.5 hrs) Azure (1.5 hrs) GCP (1.5 hrs) — Read more

Labels: Cloud VM-Series on AWS VM-Series on Azure
4677 1 by in Digital Learning Articles