Deploy PA firewall HA in different availability zone in Azure

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Deploy PA firewall HA in different availability zone in Azure

L1 Bithead

Hi all


Understand PA HA deployment supported since PAN-OS 9.0, so firewall pair can be deployed in the availability set so they are in different hardware cluster in Azure. But may I know anyone tried to form the HA in different availability zone in the same Azure region? Support or not?


Best regards


Alex Tsang 


L3 Networker

We recommend deploying firewalls in separate AZs or at least put them into an Availability Set in Azure.  HA mode is supported as well but not typically recommended.  The load balancer method is recommended.  You can see both setups in our reference architecture guide.

L3 Networker

From what i can see, the issue is that the VM-series firewall available from Azure Marketplace does not facilitate choosing an Availability Zone. And once the firewall is created, there is no reasonable way to move it into an AZ.

I would also like to know how to install it as the only method of deployment in Azure I know of is through marketplace..

Or is there some kind of ovf file provided which we can use for installation.

L3 Networker

Good morning @raji_toor and @JimMcGrady 


The Azure Marketplace offering has limited features and you can't deploy two firewalls over the marketplace in a single Ressource Group.


That why we are using Terraform templates or ARM templates. Below are the link to the ARM Templates with the examples how to use it.


ARM Templates:

Terraform provider:


How to setup HA in Azure:


i hope i could help you.




"With unity we can do great things"
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!