PAN-OS 9.0 Azure Deployment

[ebrookman]

Has anyone upgraded to PAN-OS 9.0 in their Azure environment?  I have 2 sets of Azure firewalls sitting behind multiple load balancers.  I saw where HA is now supported in Azure with Pan-OS 9.  I am debating if I want to be an early adopter and migrate, or wait 6 months for bugs to be addressed.

[OtakarKlier]

Hello,

Unless this is a dev environment, I would honeslty wait. I always wait till at least the 3rd or 4th update before considering the newest version. Check out the release notes and see if there is something you absolutly need.

Regards,

[civilised]

I have setup Ha in Azure. 

I'd like to wait but I have an issue forcing me to go down this route.

I know pre 9.0 methodology is to use two firewalls and Panaorama but I haev an API service provider charging us per VPN so the HA will save us a bomb, 

Anyway I have it working.  Problem is failover is 3 minutes plus . Also secondary device stops workign after 20 minutes, 

Shows a lot of promise once these bugs are sorted. 

[Matthew_Miller]

I've deployed a few Azure HA PANOS 9.0.1 pairs. 

They work as expected, I've done many rounds of testing.  It is true, the Azure portion of the failover can take 2 - 3 minutes for the floating IPs to move; however, the design is much more straight forward than the LB sandwich in Azure.  Also, I've tested VPN/IPSec tunnels failover smoothly with the HA deployment, can't say that's even an option with the Azure LB sandwich without Azure Function/Automation updating a UDR after the pri fails.  

I'm curious about the previous poster's passive node not working after 20 minutes... was that issue resolved?