Is there a VM-Series Next-Generation Firewall (Bundle 2 BYOL) Solution in Azure

[lourite]

I've purchased 2 licenses for VM-100 series Firewall.  Is there a BYOL template/solution to deploy these behind an APPGW and in Front of an LB or do I need to just Build everything out individually?

Thanks in advance

[jperry1]

you don't have to build the template from scratch. you can leverage the app gateway template we provide and change the firewall model to BYOL

https://github.com/PaloAltoNetworks/azure-applicationgateway

[lourite]

I'm actually not sure this will work for me after looking into it further.  The challenge is I have multiple publicly available sites/resources...the bulk of which are 80/443 based, and since the AppGateway can only support a single public IP address I don't think this will work for me.

Are there any other options?

[jperry1]

Maybe you can consider URL path based redirection for the Azure App Gateway

https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-url-redirect-powershell

[lourite]

That may work....but I don't have a high degree of confidence as we have some proprietary webapps running and not sure if they will work over non-standard ports.

If this won't work are there any other options that could work?