topic Re: Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure in VM-Series in the Public Cloud

Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

lourite — Wed, 06 Feb 2019 19:08:52 GMT

I've purchased 2 licenses for VM-100 series Firewall. Is there a BYOL template/solution to deploy these behind an APPGW and in Front of an LB or do I need to just Build everything out individually?

Thanks in advance

Re: Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

jperry1 — Wed, 06 Feb 2019 21:42:17 GMT

you don't have to build the template from scratch. you can leverage the app gateway template we provide and change the firewall model to BYOL

https://github.com/PaloAltoNetworks/azure-applicationgateway

Re: Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

lourite — Fri, 15 Feb 2019 13:01:55 GMT

I'm actually not sure this will work for me after looking into it further. The challenge is I have multiple publicly available sites/resources...the bulk of which are 80/443 based, and since the AppGateway can only support a single public IP address I don't think this will work for me.

Are there any other options?

Re: Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

jperry1 — Fri, 15 Feb 2019 17:54:32 GMT

Maybe you can consider URL path based redirection for the Azure App Gateway

https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-url-redirect-powershell

Re: Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

lourite — Fri, 15 Feb 2019 20:43:07 GMT

That may work....but I don't have a high degree of confidence as we have some proprietary webapps running and not sure if they will work over non-standard ports.

If this won't work are there any other options that could work?