About michelvankessel

Hello,   We are going to deploy a couple of PA firewalls with this template https://github.com/PaloAltoNetworks/azure/tree/master/vmseries-avset   It's a nice start, but we want some changes to be made. And I was hoping someone could help out with the following additions/changes.   - Just one choice as vm size :  DS4_v2 - No storage account, but instead the use of managed disks - Availabilty Set, compatible with the managed disks. - Five interfaces (MGMT, UNTRUST, TRUST, DMZ, ExpressRoute)   Many thanks in advance!   Michel ... View more

Hello,   At this moment I am doing a PoC for a client in Azure with two VM-300 in the so called "Sandwich" mode. So for traffic coming from the internet I have the following path: ELB > VM-300 (x2) > ILB > Webserver (x2). Both VM-300 and Webservers are both in a seperate availabilty set.    I managed to load balance the traffic from the internet on the ELB, over both VM-300s and the via the ILB to both Webservers. So far so good!   Now I ask myself the question, how do I load balance the traffic, that initiates from the webservers to the internet? on the UDR I can only point to one VM-300, not both. I cannot use a ILB for anykind of SNAT or put in in routed mode.   As far as I can see, they only thing I can do is change the UDR via a script (e.g. zookeeper) in case one of the VM-300s goes down. how do you guys handle this? How do you achieve load balance/HA for outbound server traffic to the internet or other zones in the case of two VM-300s?   Many thanks regards Michel van Kessel ... View more