Help Needed: NAT & Security Policy Configuration for Azure LB → Palo Alto → DMZ Webserver (Public IP)

[shaik.althaf]

Hello Team,

Goal:
I want to access the DMZ Webserver (Public IP) via the Azure Load Balancer Public IP.

Current Setup:

• Azure Public Load Balancer is created with Frontend IP, Backend Pool, and Health Probe.

• Palo Alto Firewall VM is added to the backend pool.

• DMZ VM (Webserver) is running with a Public IP.

Issue:

• Load Balancer backend pool is correctly forwarding traffic to the Palo Alto firewall.

• However, due to incorrect NAT policies (inbound/outbound) on the firewall, the traffic is not reaching the DMZ VM.

• I’m unable to access the DMZ Webserver through the LB Public IP.

Request:
Could you please review my Doc attached  and help me configure the NAT rules + Security Policies so that inbound/outbound traffic flows correctly?

Expected Traffic Flow:
➡️ Internet User → Load Balancer Public IP → Palo Alto Untrust NIC → DMZ Webserver Public IP
⬅️ DMZ → Palo Alto → Untrust → Load Balancer → Internet User

Thanks in advance for your guidance!