firewall deployment in Azure Vmware solution (AVS)

Reply
deepak12
L3 Networker

firewall deployment in Azure Vmware solution (AVS)

Hi All ,

 

We are exploring options to deploy PA VM series firewall in  AVS setup .

 

Could you please share any document which we can refer to start our deployment .

 

Thanks ,

 

BPry
Cyber Elite

@deepak12,

Azure's VMware solutions is just baremetal VMware. You'll want to decide if you are actually going to utilize NSX-T or not, but since you're paying for it as part of your subscription I would recommend it personally. You'll want to take a look at the following deployment guides as a starting point. 

 

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-a-vm-series-firewall-on-...

https://docs.paloaltonetworks.com/vm-series/9-1/vm-series-deployment/set-up-the-vm-series-firewall-o...

 

deepak12
L3 Networker

@BPry ,

Thanks , i will check on this. For AVS related can see  below  , so want to check still you recommend for NSX-T as if we go with NSX 3.2.0 version need to deploy Panorama on-prem ?

=========================================================================================

When using the Panorama plugin for VMware NSX 3.2.0, Panorama must be deployed on-prem, not in any public cloud environment, to manage VM-Series firewalls on AVS. This requires a VPN connection between your on-prem Panorama and your public VNet and an ExpressRoute between your public VNet and NSX-T Manager on AVS.

=========================================================================================

deepak12
L3 Networker

@BPry

 

Could you please suggest on below :

 

For NSX-T if we go with NSX 3.2.0 version ,  need to deploy Panorama on-prem ?

=========================================================================================

When using the Panorama plugin for VMware NSX 3.2.0, Panorama must be deployed on-prem, not in any public cloud environment, to manage VM-Series firewalls on AVS. This requires a VPN connection between your on-prem Panorama and your public VNet and an ExpressRoute between your public VNet and NSX-T Manager on AVS.

=========================================================================================

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!