How to configure ingress to Azure Load Balancers with PaloAlto-secured network

[BilalMohd]

Hi, I am looking to deploy external load public load balancer for controlling ingress traffic from Internet to Palo Alto VM-series deployed as active/active behind this load balancer. What will be the configurations on external load balancer and how will the NAT configurations if I am exposing application sitting behin my internal load balancer. The topology looks as below.

@TomYoung , any suggestions on the configurations on external load balancer, do I have to create load balancing rules or may be create Inbound NAT rules so that it distributes the traffic to the firewall.

[TomYoung]

Hi @BilalMohd ,

Please check out the PANW Azure Reference Architecture page -> https://www.paloaltonetworks.com/resources/reference-architectures/azure.  The Deployment Guide (2nd URL) has detailed steps for everything, including NAT.

Thanks,

Tom