About DTG123

I have to admit it, I love to create good examples that others can follow. I know the PAN team has published some great examples up on Github.  But I figured I would publish my own example of how to deploy a VM-Series firewall in Azure using Terraform and Bootstrap. I hope someone finds it useful. It can be found here: https://github.com/dustintodd123/azure-terraform-paloaltofw   Warning: I do go off on a pretty extensive rant about the choices we have to make in public cloud access control. But you can just ignore that part if you like.          ... View more

I am trying to create a vm-series FW in Azure using Terraform. I am following this example: https://github.com/PaloAltoNetworks/terraform-azurerm-panos-bootstrap But I get a similar error to this one in the bootstrap status and log. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP7jCAG I have tried using the same parameters via the marketplace ARM template  and the bootstrap completes successfully so I think my bootstrap file share is set up correct.  My snippet of Terraform code looks like this.  os_profile { computer_name = var.FirewallVmName admin_username = var.adminUsername admin_password = var.adminPassword custom_data = join( ",", [ "storage-account=mystgacct", "access-key=mystgacctkey", "file-share=myfileshare" ], ) } Any pointers are appreciated. Even the CLI commands I need to view what parameters actually get passed into the Vm-series would help.   ... View more

For whatever reason I didn't see the need to configure HA2. But while testing HA I could not get preemption to work. I read everything I could find online and got frustrated that it would not let the designated firewall take back control automatically. I read the system log and bit more closely and found this entry: "HA Group 1: Ignoring session synchronization due to HA2-unavailable; preemption waiting for session synchronization" I cannot find single reference online to a connection between session sync and preemption but there you have it. Just thought I would save the next bozo like some face palming by posting this. Good luck! ... View more