Cloud NGFW for Azure Discussions

USER ID -cloud NGFW Azure

Hi , Any one enable USER ID on cloud NGFW on azure and working smoothly in there environment? We tried POC in our environment but we are observing intermittent discussion between Palolo agent and Cloud NGFW azure which affecting its integration. We already opened TAC case but havent seen positive progress Thanks Sanil Hande

Use of Azure service Tags in Cloud NGFW rules

Hi, can anyone advise if it will be possible to use Azure service tags in the Cloud NGWF rule base? We currently run a VM and use external dynamic lists for this, but I don't see an option to do that in GUI so far. Note we are not using Panorama at present, so maybe it is possible with that, but would be good to know if we can use service tags ...

Resolved! Azure NGFW VNet Deployment - No Outbound Internet Access

Deployed a NGFW deployment for a customer. Using the VNet deployment, not VWAN. Everything is green (DG and Template) and healthy from the Panorama aspect. We have created a UDR in a test application VNET, that points only a default route to the NGFW firewalls.East/West connectivity works great. We are also able to access everything across the e...

Policy issue after FW instance upgrade

Hi team, Anyone recently experience issue or outage after fw instances of upgrade from 10.2.7-C28 to 10.2.7.c51 on there cloud NGFW Azure service ???

Cloud NGFW for Azure Autoscale

In the doco I see that Cloud NGFW for Azure can automatically scale to 40 instances and support 100Gbps in a vNet. I do not see any details for the config of autoscaling. Do I need to configure the autoscaling or does it just happen?

UTD for Azure

There is an UTD for AWS. I do not see one for Azure. Given the vast difference between the two CSP are there any other professional services classes (I have already taken the PSE-PRO classes) for Cloud NGFW on Azure?

Authentication failed: empty password. Azure SAML.

Issue: Users leave computer on after work. Users come back to reconnect. User gets Authentication Failed message in default browser. User notices that sometimes their username is not their SAML UnP (email) but their AD username. it should be their SAML UnP(email) This isn't happening to everyone but just a small subset of people Restarting th...

Does Palo alto Support sub-interfaces in Public Clouds ?

I have gone through the deployment guides in AWS, Azure and GCP . AWS has its own ways to integrate it with GWLB however does PA supports sub-interfaces in Azure and GCP ? There is no concept of vlan in cloud and everything is done on L3. Has anyone done this ?

how to configure custom DNS server for Cloud NGFW

When configuring custom DNS server in Panorama for Cloud NGFW. I get an commit error. Please find attached DNS service config in Panorama and the commit failure. I tried config with DNS Proxy, but that does not seem to help in this case.

Unable to add one VM-instance in the Device group in the Panorama for cloud NGFW for Azure.

Hi, We have recently created cloud NGFW Palo alto on Azure. We have successfully integrated firewall in to the panorama as well. We have created one Device group and added all three new VM-instances from the Cloud NGFW. Recently one of the VM instance went down. After logging a call with PA TAC , the TAC engineer rebooted the instance on the...

The provisioning state on Azure is failed

Hello everyone, I am writing to address an issue encountered during the deployment and configuration of a Cloud Native Firewall on the Azure platform. Initially, the deployment proceeded smoothly, with all functionalities operating as expected. However, difficulties arose upon attempting to modify the device group and its association with the ...

Panorama management for Cloud NGFW

We are deploying Cloud NGFW in Azure and want to manage it from Panorama. We have decided for Cloud NGFW in a vWAN option. We followed all the instructions and there weren't any issues. But we can't seem to push policy from Panorama to Cloud NGFW. How can we verify the status of integration between Panorama and Cloud NGFW? As Panorama is in Az...

Dev/Test Subscriptions

Hey, I can't find any information on this in the FAQs, forum, pricing calculator, or announcement. We have dev/test subscriptions in Azure that mirror our production environment. Does the NGFW offering price out identically in the dev/test subscription, or is it discounted? That information would help us decide whether we move from the vm ser...

Panorama managed template config

Does anyone have any information on what configurations are needed in the Template stack associated with the Cloud NGFW? Specifically I am looking for what the interface and vrouter settings will likely need to be, such as ethernet1/1 and 1/2 set to DHCP, vrouter next hop of X, or if we need to allow for the Azure load-balancer probe monitoring...

Cloud NGFW for Azure - VWAN Hub integration availability

VWAN Routing Intent and Policies and SaaS Solutions functionality is currently being rolled out by Microsoft in the Azure Portal. The target availability date for every region where Cloud NGFW is available is Tuesday, May 9, 2023.

Unlock your full community experience!

Resolved! Azure NGFW VNet Deployment - No Outbound Internet Access