topic Re: How can i Create more than 4 security zones on VM-100 on Azure? in VM-Series in the Public Cloud

How can i Create more than 4 security zones on VM-100 on Azure?

Ammar — Sun, 25 Aug 2019 15:11:56 GMT

We have deplyed a VM-100 FW on Azure on A D3_v2 VM. The VM support maxium of 4 vNICs to be attached to the firewall and i used them as (mgmt, trust, untrust, dmz).

now i need to create more 2 DMZz with a diffewrent Subnets and Security zone, which is not supported ?

Do you have any ideas on how to solve this Case ??? i must have two other isolated DMZs ...

Re: How can i Create more than 4 security zones on VM-100 on Azure?

jmeurer — Sun, 25 Aug 2019 16:05:18 GMT

I would encourage you to review our reference architecture. It covers east-west flows that is the cloud reclassification of a DMZ. As designs scale, we move Azure toward transit VNET designs.

https://www.paloaltonetworks.com/resources/guides/azure-architecture-guide

In addition, your SE can engage with you in a design session around cloud architectures as they typically differ from traditional DC designs due to the lack of L2 in the cloud.