Palo Alto VM series deployment in Azure Cloud

KunhipockerShabeebEdu — Fri, 25 Oct 2024 19:57:15 GMT

Hello Everyone,

We are planning to deploy two VM series firewalls in our Azure landing zone.

In our case, Palo Alto firewall is like a data center firewall and we have a Fortigate in the perimeter.

All outbound traffic from cloud servers will hit the Palo Alto first and then move to the Fortigate and then to the internet.
All inbound traffic to cloud servers should hit the Fortigate first and then move to the Palo Alto and then to the cloud server.
Public IPs will be present on the Fortigate and not on the Palo Alto

When I checked the design options I have seen 2 options as given below.

1. Active/Passive

Good for config sync and session sync. But I read people mentioning about the longer failover time.

2. Standalone deployment with load balancers

Which one should I choose?. I would like to know which option is mostly deployed.

Thanks in advance

Re: Palo Alto VM series deployment in Azure Cloud

KunhipockerShabeebEdu — Sat, 26 Oct 2024 18:03:11 GMT

Any update guys?.