PaloAlto integration with Azure GWLB

andrea.pintus — Wed, 16 Oct 2024 16:21:40 GMT

Hello!
i'm trying to integrate 2 PaloAlto VMs with Azure GWLB.

i found out this guide from PaloAlto: https://docs.paloaltonetworks.com/vm-series/11-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/deploy-the-vm-series-firewall-with-the-azure-gwlb

i didn't use the ARM template, so i'm trying to configure manually the gwlb parameters in each FW with these commands:

request plugins vm_series azure gwlb inspect enable yes request plugins vm_series azure gwlb parameters internal-port 2000 external-port 2001 internal-vni 800 external-vni 801 show plugins vm_series azure gwlb

my issue is that even after configuring the param, i don't receive any output using the "show plugins...".

i attached a screenshot for reference (CLI.png).

the OS version of the PAs is 11.2.0 and the version of plugins is vm_series-5.1.0.

i tried to check the plugins log and i found out some errors (CLI2.png).

So i'm assuming this is bug with the plugin version, so i'd like to downgrade the PAN-OS version to 10.1.12, downloading the software from support.paloaltonetworks.com since those 2 VMs don't have licenses at the moment.

i choose content type PAN-OS for VM-Series and downloaded the 10.1.12 image.

but when i tried to upload manually the image from the GUI i get an error (error.png).

seems like the image isn't the correct one.

topic PaloAlto integration with Azure GWLB in VM-Series in the Public Cloud

PaloAlto integration with Azure GWLB