- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
12-04-2020 09:32 AM
Hi All ,
We are exploring options to deploy PA VM series firewall in AVS setup .
Could you please share any document which we can refer to start our deployment .
Thanks ,
12-04-2020 10:29 AM
Azure's VMware solutions is just baremetal VMware. You'll want to decide if you are actually going to utilize NSX-T or not, but since you're paying for it as part of your subscription I would recommend it personally. You'll want to take a look at the following deployment guides as a starting point.
12-05-2020 07:20 AM
@BPry ,
Thanks , i will check on this. For AVS related can see below , so want to check still you recommend for NSX-T as if we go with NSX 3.2.0 version need to deploy Panorama on-prem ?
=========================================================================================
When using the Panorama plugin for VMware NSX 3.2.0, Panorama must be deployed on-prem, not in any public cloud environment, to manage VM-Series firewalls on AVS. This requires a VPN connection between your on-prem Panorama and your public VNet and an ExpressRoute between your public VNet and NSX-T Manager on AVS.
=========================================================================================
01-08-2021 12:37 PM
Could you please suggest on below :
For NSX-T if we go with NSX 3.2.0 version , need to deploy Panorama on-prem ?
=========================================================================================
When using the Panorama plugin for VMware NSX 3.2.0, Panorama must be deployed on-prem, not in any public cloud environment, to manage VM-Series firewalls on AVS. This requires a VPN connection between your on-prem Panorama and your public VNet and an ExpressRoute between your public VNet and NSX-T Manager on AVS.
=========================================================================================
12-19-2021 07:43 PM
Did you were able to deploy Palo VM inside AVS? Did you used ESX or NSX-T Service insertion mode?
I have tried NSX-T Service insertion mode on AVS we were not able. Connection to NSX manager was ok, however when trying to deploy the service, it was asking for the attachment point and none was available, it seems tier0 was not an option as its on active/active and even creating a tier1 it didn't allowed us to select it as an attachment point, so not sure if I'm doing something wrong or if this is a limitation of NSX-T on AVS.
Any suggestion or feedback is welcome.
thanks
07-02-2024 05:26 AM
Do you have routing and other configuration details for these topologies mentioned in the link provided. For eg: creating transient/management segments and isolated tier 1 gateways etc.
However, into the NSX-T environment of AVS I believe the "service deployment" button is disabled or enabled so we cannot register the VM-Series firewall as a service.
Is it possible download and install the Palo Alto appliance as an .OVA file into the nsx-t environment ?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!