topic How can i Create more than 4 security zones on VM-100 on Azure?? in VM-Series in the Public Cloud

How can i Create more than 4 security zones on VM-100 on Azure??

AzmirAhmmhed — Tue, 05 May 2020 08:14:19 GMT

We have deplyed a VM-100 FW on Azure on A D3_v2 VM. The VM support maxium of 4 vNICs to be attached to the firewall and i used them as (mgmt, trust, untrust, dmz).

now i need to create more 2 DMZz with a diffewrent Subnets and Security zone, which is not supported ?

Do you have any ideas on how to solve this Case ??? i must have two other isolated DMZs

Re: How can i Create more than 4 security zones on VM-100 on Azure??

jmeurer — Tue, 05 May 2020 15:25:09 GMT

We usually design away from a zone-based architecture and leverage the Azure Load Balancer with a 1 arm design to achieve fault tolerance and scale. It does move you to a subnet based policy design which is just as secure given Azure inherent capabilities to prevent spoofing. Please refer to our reference architecture for more details.

https://www.paloaltonetworks.com/resources/reference-architectures/azure