topic Re: firewall deployment in Azure Vmware solution (AVS) in VM-Series in the Public Cloud

firewall deployment in Azure Vmware solution (AVS)

deepak12 — Fri, 04 Dec 2020 17:32:28 GMT

Hi All ,

We are exploring options to deploy PA VM series firewall in AVS setup .

Could you please share any document which we can refer to start our deployment .

Thanks ,

Re: firewall deployment in Azure Vmware solution (AVS)

BPry — Fri, 04 Dec 2020 18:29:03 GMT

@deepak12,

Azure's VMware solutions is just baremetal VMware. You'll want to decide if you are actually going to utilize NSX-T or not, but since you're paying for it as part of your subscription I would recommend it personally. You'll want to take a look at the following deployment guides as a starting point.

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server.html

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-on-nsx/set-up-the-vm-series-firewall-on-nsx-t.html

Re: firewall deployment in Azure Vmware solution (AVS)

deepak12 — Sat, 05 Dec 2020 15:20:02 GMT

@BPry ,

Thanks , i will check on this. For AVS related can see below , so want to check still you recommend for NSX-T as if we go with NSX 3.2.0 version need to deploy Panorama on-prem ?

=========================================================================================

When using the Panorama plugin for VMware NSX 3.2.0, Panorama must be deployed on-prem, not in any public cloud environment, to manage VM-Series firewalls on AVS. This requires a VPN connection between your on-prem Panorama and your public VNet and an ExpressRoute between your public VNet and NSX-T Manager on AVS.

=========================================================================================

Re: firewall deployment in Azure Vmware solution (AVS)

deepak12 — Fri, 08 Jan 2021 20:37:50 GMT

@BPry,

Could you please suggest on below :

For NSX-T if we go with NSX 3.2.0 version , need to deploy Panorama on-prem ?

=========================================================================================

Re: firewall deployment in Azure Vmware solution (AVS)

EduardoNavarro — Mon, 20 Dec 2021 03:43:49 GMT

Did you were able to deploy Palo VM inside AVS? Did you used ESX or NSX-T Service insertion mode?

I have tried NSX-T Service insertion mode on AVS we were not able. Connection to NSX manager was ok, however when trying to deploy the service, it was asking for the attachment point and none was available, it seems tier0 was not an option as its on active/active and even creating a tier1 it didn't allowed us to select it as an attachment point, so not sure if I'm doing something wrong or if this is a limitation of NSX-T on AVS.

Any suggestion or feedback is welcome.

thanks

Re: firewall deployment in Azure Vmware solution (AVS)

eshukaushal — Tue, 02 Jul 2024 12:26:20 GMT

Do you have routing and other configuration details for these topologies mentioned in the link provided. For eg: creating transient/management segments and isolated tier 1 gateways etc.

https://techcommunity.microsoft.com/t5/azure-migration-and/firewall-integration-in-azure-vmware-solution/ba-p/2254961

However, into the NSX-T environment of AVS I believe the "service deployment" button is disabled or enabled so we cannot register the VM-Series firewall as a service.

Is it possible download and install the Palo Alto appliance as an .OVA file into the nsx-t environment ?

Re: firewall deployment in Azure Vmware solution (AVS)

templeton_al — Thu, 24 Oct 2024 18:32:36 GMT

Any updates on this architecture with the OVA file in the AVS NSX-T environment?