Issue after onboard Azure VM into SCM

[SuhaimiMohd]

Hi,

Setting up a lab by provisioning a Palo BYOL VM Firewall in Azure and setup a simple Trust and Untrust zones. I also have a Win 10 VM in the trust zone which connects to internet through the Firewall. All of them are in the same Vnet with different Trust and Untrust in different subnets. All work good.

However, when I onboard the firewall to SCM (after resetting the firewall to factory default  and reconfiguring exactly same Security Policy, NAT, Interfaces and Routing), the internet destined traffic from the Win 10 in the Trust zone no longer able to be routed to the firewall. No logs captured as well. Only intra-zone traffic is forwarded to the firewall.

Is there something a miss for onboarding Azure VM firewall into SCM?

Thanks