12-17-2025 09:49 PM
Hello, I am trying to wrap my head around the PA deployment in azure using PA Series. I am basically following this video on setting up 2 zones, 2 Virtual routers, and route rules.
In my setup the two spoke vnets have UDR with 0.0.0.0/0 route to the trust interface of the PANFW. I created two VRs and associated with the Interfaces. I have also associated public IP on the untrust to give the Default Outbound Access. But still my spoek to spoke (east-west) traffic is not working.
So then I had look at my VNet peer setting, I tried to check boxes that say use Hub vnets Remote gateway but Azure FAILS saysing there is no gatway in my Hub.
Now I need to know how do I make azure discover that there is firewall NVA in the hub vnet to allow East-West traffic between spoke VMs. This is not clear to me. Thanks.
Here is a ref architecture I am planning to deploy:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
