topic VM-Series active/passive deployment over GitHub fails in VM-Series in the Public Cloud

VM-Series active/passive deployment over GitHub fails

SeSchulte — Tue, 09 Sep 2025 09:47:24 GMT

Hello Community,

I am currently trying to perform an HA deployment in Azure.
To do this, I am using the ‘Azure HA Deployment’ via GitHub and the embedded link where I can then deploy the VM series in the Azure Portal.

Here are the links to the topic:

https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/configure-activepassive-ha-for-vm-series-firewall-on-azure
https://github.com/Saleh123450/Azure-HA-Deployment?tab=readme-ov-file

Unfortunately, the deployment in Azure fails because it cannot find the interface that is created in the deployment.

Does anyone have a solution to this problem?

Best regards,
SeSchulte

Re: VM-Series active/passive deployment over GitHub fails

AhmedAlRashed — Wed, 17 Sep 2025 18:25:54 GMT

Running into the same issue here, not sure who I should escalate to!

Re: VM-Series active/passive deployment over GitHub fails

SeSchulte — Wed, 17 Sep 2025 19:46:02 GMT

Hey Ahmed,

Since GitHub ARM deployment is supported by the community, I am currently trying to contact the relevant contributors to request an update, as I have not yet been able to find the error in the json file.

I will get back to you as soon as I have some positive news. 🙂

Best regards

Re: VM-Series active/passive deployment over GitHub fails

AhmedAlRashed — Wed, 17 Sep 2025 20:17:32 GMT

Hey @SeSchulte, I've just managed to deploy two firewalls in HA.

I've deployed one firewall from the marketplace in one resource group (palofw-rg) and the second firewall in another resource group (palofw-rg-test) using the same method from the marketplace and then moved the second firewall into the resource group (palofw-rg). All working as expected.

Re: VM-Series active/passive deployment over GitHub fails

SeSchulte — Fri, 03 Oct 2025 08:37:54 GMT

Hey Ahmed,

Thanks for your reply.

I have now deployed the second node via the Azure Store as well.
The new firewall was deployed to the availability set without any problems.

After creation, I was able to add another interface and also add the new node to the corresponding resource group without any problems.

So the problem is solved. 🙂

Best regards