Need Help with Palo Alto IPsec VPN, Azure Application Gateway, and DNS Behavior

[katherine_ryan]

I have set up two Palo Alto VM-Series firewalls to establish an IPsec VPN connection. The goal is to provide secure access for mobile users via GlobalProtect while also utilizing Azure Application Gateway for load balancing and routing."http://www.dmvnow.wiki" Registration-Renewal Feel free to share your thoughts, suggestions, or even similar experiences you've had. I'm using Panorama to manage the configuration and Prisma Access for enhanced security.

[TomYoung]

Hi @katherine_ryan ,

There are some great documents here.  https://www.paloaltonetworks.com/resources/reference-architectures/azure

The "Securing Applications in Azure - Deployment Guide" has good detailed steps on how to deploy the Azure Application Gateway.  The VMs will not be in HA.  The failover will be fast, but the GP client will have to login again.

Thanks,

Tom