PA in Azure and Public front LB

FatihT — Fri, 04 Mar 2022 14:15:45 GMT

Hello

I'm considering to implement PaloAlto VM-series in Azure in 'autoscaling' mode.

This involves to have an App GW and a Standard LB in front of the firewalls.

My questions are, as follows:

In addition the deployed Azure App GW, is it possible to have additional Azure App GW?
- the aim is to have multiple public IP address (by default App GW can have only one public/private IP)
In addition to that, can we also add Azure Standard LB (L4) in order to publish Internet facing non web applications?
- can we also use the Std LB deployed through the template and attach a public IP for this purpose?

I put in the attached diagram 2 additional App GW and Syd LB.

Regards

Re: PA in Azure and Public front LB

FatihT — Mon, 14 Mar 2022 15:45:27 GMT

Hi,

I've been in touch with a PaloAlto engineer who confirm that additional Azure App GW and Standard LB can be added to the existing one.

Regards.