topic Need Help with Palo Alto IPsec VPN, Azure Application Gateway, and DNS Behavior in VM-Series in the Public Cloud

Need Help with Palo Alto IPsec VPN, Azure Application Gateway, and DNS Behavior

katherine_ryan — Fri, 01 Sep 2023 10:49:35 GMT

I have set up two Palo Alto VM-Series firewalls to establish an IPsec VPN connection. The goal is to provide secure access for mobile users via GlobalProtect while also utilizing Azure Application Gateway for load balancing and routing."http://www.dmvnow.wiki" Registration-Renewal Feel free to share your thoughts, suggestions, or even similar experiences you've had. I'm using Panorama to manage the configuration and Prisma Access for enhanced security.

Re: Need Help with Palo Alto IPsec VPN, Azure Application Gateway, and DNS Behavior

TomYoung — Wed, 30 Aug 2023 00:03:00 GMT

Hi @katherine_ryan ,

There are some great documents here. https://www.paloaltonetworks.com/resources/reference-architectures/azure

The "Securing Applications in Azure - Deployment Guide" has good detailed steps on how to deploy the Azure Application Gateway. The VMs will not be in HA. The failover will be fast, but the GP client will have to login again.

Thanks,

Tom