Azure
Welcome to the Palo Alto Networks VM-Series on Azure resource page. This area provides information about VM-Series on Microsoft Azure to help you get started or find advanced architecture designs and other resources to help accelerate your VM-Series deployment. Engage the community and ask questions in the discussion forum below.
cancel
Showing results for 
Search instead for 
Did you mean: 

VM-Series on Azure Deployment Resources

Welcome to the Palo Alto Networks VM-Series on Azure resource page. This area provides information about VM-Series on Microsoft Azure to help you get started or find advanced architecture designs and other resources to help accelerate your VM-Series deployment. Engage the community and ask questions in the discussion forum below.

How to Videos and Tutorials

Note: In order to view ALL of the articles in this section and to engage in discussions on this platform, you must register for an account on LIVEcommunity. Some articles may not be viewable to unregistered users.

Register for a LIVEcommunity account

Customer Support Portal Resource

Note: In order to create a case, please create or active an account and register your device, which can be done in the Customer Support Portal. This area provides product support for all Palo Alto Networks Customers.

Login to the Customer Support Portal

Additional Resources on Beacon

Visit Palo Alto Networks' learning platform, Beacon, for technical knowledge and educational resources related to all of our products.

Please note: You need to be logged into SSO in order to view this content.

Templates, Scripts and Deployment Resources

Terraform Template that deploys a two-tier containerized application on AKS secured by VM-Series

Uses a Terraform template to deploy (2) two-tiered containerized applications (Guestbook app and a WordPress server) within an AKS cluster that is protected by the VM-Series in an Application Gateway/Load Balancer sandwich.

Palo Alto Networks Community Supported

Azure-FW-4-Interfaces

Deploys a VM-Series with 4 interfaces into an existing Microsoft Azure environment.

Palo Alto Networks Community Supported

Azure-FW-3-Interfaces

Deploys a VM-Series with 3 interfaces (1-MGMT and 2-Dataplane) into an existing Microsoft Azure environment.

Palo Alto Networks Community Supported

Multiple Azure interface variations

Several ARM templates for the VM-Series with varying options including multiple interfaces.

Palo Alto Networks Community Supported

Azure-2-Firewalls-Public-Load-Balancer

Deploys a Public Azure Load Balancer in front of 2 VM-Series firewalls with the following features:

  • The 2 firewalls are deployed with 4-8 interfaces. 1 MGMT and 3-7 data plane.
  • Static IP addresses are assigned to the interfaces based on the input in the starting ip address fields.

Note: This template deploys into existing VNETs and storage accounts within the same region. As a result, the storage account and VNET must be created before deploying this template.

Palo Alto Networks Community Supported

Managed Scale and Resiliency for the VM-Series on Microsoft Azure

An ARM template that deploys two VM-Series firewalls between a pair of Azure load balancers to deliver managed scale and high availability for internet facing applications.

Using VM-Series Firewalls to Secure Internet-Facing Web Workloads

This template creates a highly available VM-Series security solution for Azure for both inbound traffic and outbound traffic. It uses VM-Series firewall pairs coupled with Azure load balancers for a fully redundant security solution.

Auto Scaling the VM-Series-firewall on Azure v1.0

Templates and scripts that deploy Azure Load Balancers and the VM-Series firewalls to deliver security for internet facing applications. Allows for protecting of new or existing workloads.

Azure Transit VNet with the VM-Series

Deploys a Hub and Spoke architecture to centralize commonly used services such as security and secure connectivity. All traffic to and from the Spokes will 'transit' the Hub VNet and will be protected by the VM-Series next generation firewall.

Azure Transit VNET architecture with auto scaling VM-Series in application spoke

Deploys a Hub and Spoke architecture to centralize commonly used services such as security and secure connectivity. All traffic to and from the Spokes will 'transit' the Hub VNET and will be protected by the VM-Series next generation firewall. Version 1.1 adds ability to do auto scaling for VM-Series to protect Internet facing applications running in a spoke VNET.

Two tier application environment protected by VM-Series

ARM template that deploys a two-tiered web/DB application environment secured by a VM-Series firewall. Template includes relevant User-Defined Route (UDR) tables to send all traffic through the VM-Series firewall.

Terraform two tier application environment protected by VM-Series

A Terraform Template that deploys two-tiered web/DB application environment secured by a VM-Series firewall.

Palo Alto Networks Community Supported

Azure VM Monitoring

Python script that harvests Azure VM properties and publishes them as IP-tag mappings that can be used in a Dynamic Address Group.

Azure Discussions

Author Topic Views Replies
05-23-2022

Palo HA in Azure - traffic flow

I have a pair of VM300 gateways running 9.1.13 in Azure. I'm using a 'load balancer sandwich' approach to provide active active HA. The public loa...

147 2
05-06-2022

Palo in AWS to Azure VPN Gateway

Hi All, I am trying to setup a site-to-to site VPN between Palo (v9.0.1) and Azure VPN gateway. I have a question and an issue that I am trying ...

46 0
05-05-2022

VM-Series maintenance in Azure VMSS

Hello Is there a way to upgrade existing VM-Series in Azure VMSS? What is the process? Regards

204 3
05-04-2022

PA-VM hanging on Azure

Hi All, I have an outage issue on our PA-VM hosted in azure. We are unable event to remote the console. All network seems down, and by azure sup...

183 1
03-30-2022

Unable to connect log collector to panorama

I have a panorama VM running on Azure, I am currently trying to bring up some log collector VMs also on azure to handle the logs of my firewalls. ...

333 1
03-25-2022

Azure NAT Rule closing VPN Tunnel

Good Afternoon, We have a VPN tunnel established b/t an Azure VPN GW and a PA 3020 running 9.1.10. We need to add a NAT rule on the Azure side. W...

214 0
03-21-2022

Palo Alto Support for NGFW VM in Azure network

We plan to purchase Palo Alto VM NGFW bundle 1 from Azure (FW license included) instead of BYOL version. Does Palo Alto provide technical support ...

327 1

Azure Blogs

October VM-Series and CN-Series Updates

10-21-2021 — This month’s VM-Series and CN-Series firewalls update is full of useful information about optimizing our virtual and container firewalls across a range of environments so that you can secure data, workloads, and applications wherever they reside.

Tags: aws CN-Series vm-series azure panorama
Labels: AWS Azure CN-Series Panorama VM-Series
822 by in Blogs

New Cloud Identity Engine and SaaS Security Pages on LIVE

06-10-2021 — LIVEcommunity is excited to share two new pages with you—Cloud Identity Engine and SaaS Security.

Tags: azure Cloud Identity Engine okta panorama SaaS Security
Labels: Azure Cloud Identity Engine Saas Security
6473 1 1 by in Blogs

April VM-Series and CN-Series Updates

04-20-2021 — We are pleased to announce several new features, plugins and qualifications for software firewalls. We also released the VM-Series Plugin 2.0.6 and Pan OS 10.0.5 MR release, addressing several known issues. Read on for news about AWS overlay routi...

Tags: aws azure CN-Series ESG hybrid cloud IBM Cloud new feature nsx panorama vm-series
Labels: AWS Azure CN-Series gcp Hybrid Cloud NSX Panorama Terraform
6373 3 by in Blogs

Panorama Orchestrated Azure Deployments Now in Beta

08-20-2020 — Palo Alto Networks is excited to offer a new orchestrated deployment method to provide next-generation security protection for your workloads in Azure using the Palo Alto Networks Virtual firewall.

Tags: azure deployment firewall panorama vm-series
Labels: Azure Panorama VM-Series
16627 5 3 by in Blogs

Securing Workloads in Azure with Zero Trust

03-31-2020 — Find out how to provide Zero Trust security in Azure using the Palo Alto Networks virtual firewall.

Tags: ARM Automated Deployment azure cloud firewall IaaS Virtual Firewall vm-series Zero Trust
Labels: Azure Cloud Firewall Panorama VM-Series
2646 by in Blogs

Azure Articles

Here's What You Missed — June Rewind

07-01-2021 — Catch up on everything the LIVEcommunity was up to during the month of June!

Labels: Community News VM-Series on Azure
1165 1 by in News

Open Source VM-Series Terraform Modules

05-04-2021 — A set of modules for using Palo Alto Networks VM-Series firewalls to provide control and protection to your applications running on Azure Cloud.

Labels: Strata Configure Strata Deploy Terraform VM-Series VM-Series on Azure
1618 by in Quickplay Solutions Archived Articles

Here's What You Missed - April Rewind

05-03-2021 — LIVEcommunity April Rewind It’s a new month so you know what that means… time for our monthly rewind! Let’s take a look back at April and see all of the exciting announcements and initiatives shared on the LIVEcommunity. It's Here - The Enhan...

Labels: April Community Community Updates News VM-Series on Azure
1045 1 by in News

Firewall VM-Series

10-15-2020 — Firewall VM-Series: Overview (2 hrs) AWS (1.5 hrs) Azure (1.5 hrs) GCP (1.5 hrs)

Labels: Cloud VM-Series on AWS VM-Series on Azure
1802 1 by in Digital Learning Articles