Palo Alto VM-Series on Azure

An Introduction about Palo Alto Design in Azure Cloud.
We have discussed, Transit VNet Model (Hub & Spoke Topology) Common Firewall model and Single VM series firewall.

[@VulgarAmbassador]

Hands down the best explanation for PA NVA Firewall Design in Azure.

[@CyberTronics]

very well drawn diagrams, i appreciate the time spent on how neat they are.

[@sportsboy5935]

you explained the difficult concept in deadly easy manner. Fabulous, Great job.

[@ee07168]

thank you

[@StasKlev]

A very thorough explanations, thank you for your work!

[@ee07168]

Glad you enjoyed it!

[@ShaileshYadav__]

Well explained! thanks much. Please bring more topics.

[@smashikhits]

Very well explained.. Good work

[@adsalhi1]

Very well explained. Thank you so much

[@ee07168]

thanks for appreciation

[@jatnvirk]

Very well explained Thanks !

[@user-fh9su5eq7e]

Great explanation. You should have more videos about the other design model in the guide.

[@lionheart2663]

Awesome ...i feel very confident now setting this up :) Thank you Sir

[@ee07168]

welcome

[@StevenEijzermans]

How many VR per firewall? With back and frontend LB how do you do availability check of FW from LB?

[@narendra7338]

Very well explained. Thanks a ton Sir 🙏

[@ee07168]

thank you

[@naveeduddin15]

Thanks for the information and explanation

[@ee07168]

Wel come

[@jacktuten4326]

Fantastic explanation, thank you!

[@ee07168]

thank you Jack

[@kingsadmin]

nice one! thanks!

[@Radhakrishnabhakt]

you made me clear sir. U are best

[@ee07168]

Thank you

[@MuhammadIsmail-if7fs]

Very informative

[@deepakkatote1855]

Very well explained thank you it helped me in my new project

[@ee07168]

thank you for your kind words

[@jaymi903]

Great explanation I am just confused about how this is configured in terms of availability sets , are you able to explain ?

[@Sumit-rr7db]

nicely explained, but problem is Audio issue, Please fix that because withought proper Video/Audio even good content could not appreciated. Thank you

[@abarnajayabal5453]

superb explanation sir

[@ee07168]

Thanks for appreciation

[@osmansalah7687]

Nice one Do you provide an online training for Azure? If yes please let me know we are group!

[@knowledgebuddyab87]

How about the outbound internet traffic? Can we route outbound internet traffic from multiple firewalls using outbound load balancers? That way it will always have same outbound public ip address.

[@itsQuark]

Masha Allah

[@StevenEijzermans]

How many VR per firewall? With back and frontend LB how do you do the check of FW from LB?

[@officialvideos4sure93]

Hi Sir, can you please share the lab setup or if you can setup this in lab and show us how we can achieve this

[@ee07168]

it is available in palo alto documentation

[@sportsboy5935]

@@ee07168 can you share the link. and for lab on Azure which license i need to get

[@manishkct]

Network Expert - Are you guys provide training to deploy virtual firewalls on aws and azure cloud. Please let me know.

[@ee07168]

I can provide you a trainnig for [phone]

[@iqwindersingh8997]

It will be assymetric traffic

[@arghabhattacharya1995]

Hello I have a question related to this .. Let's say we 2 NVA ( Palo Alto vm-300) in HA ( active passive) & I have 2 VMS as web servers Questions -- - I want to route both inbound and outbound (internet) traffic of web servers via NVA ... How should I do it ?? Should I have a internal azure lb >> add webservers as backend members to lb >> create a vip && point it towards the trust interface of NVA - Palo Alto ?? && For VMS have a UDR & default route towards the lb ??? What will happen if a failover happens at NVA - Palo Alto , how the traffic switch will happen in this case ??

[@ee07168]

Palo alto doest not support Unicase HA in azure , you need to deploy palo alto which have API script for failover

[@arghabhattacharya1995]

@@ee07168 I am deploying palo vm-300 series vNVA on azure from marketplace.. & it does have native support for failover of fw etc... Using native API

[@knowledgebuddyab87]

hi, do you provide consultancy services? if yes, how do we reach out to you?

[@ee07168]

[e-mail]

[@iqwindersingh8997]

Session will not eatablish since syn, syn-ack, ack will not be formed. Firewall 1 would expect the return traffic but the return traffic is coming on fw 3. So session will not bw formed. It wont work

[@ee07168]

Dear Singh, first of all I really appreciate for your feedback, Firewall 1 will do the SNAT, therefore the return traffic will come from firewall 1, I hope I have clear your confusion, incase if still it is not clear please do let me know I will explain you further