Deploy Palo Alto VM-Series Firewall in Azure Cloud

This video is to show you the steps how to deploy Palo Alto VM-Series firewall into Azure to protect your cloud environment.
Prerequisites
1. Azure Account
2. Subscription (Pay as you go)
Steps:
1. Launch VM-Series Next Generation Firewall From Marketplace
2. Activate License
3. Configure Trust/Untrust Interfaces
4. Define Virtual Routers and Static Routes
5. NAT Rule for Internet Traffic
6. Create Security Policy Rules for Your Traffic
7. create a new public ip for your untrusted interface. (Option)
Related post: ✍ blog.51sec.org...
Related Videos:
🌟Download PaloAlto Firewall VM and Create A Simple Lab In VMWare Workstation - • Download Palo Alto Fir...
🌟Palo Alto IPSec VPN Configuration - 2. Basic Configuration for Connectivity - • Palo Alto IPSec VPN Co...
🌟Palo Alto IPSec VPN Configuration - 3. VPN Configuration - • Palo Alto IPSec VPN Co...
🌟Deploy Palo Alto VM-Series Firewall in Azure Cloud - • Deploy Palo Alto VM-Se...
======================================================================
If you found this video has some useful information✍, please give me a thumb up ✅ and subscribe this channel 💖to get more updates🌟:
⚡www.youtube.co...
⚡Resource Collection and Bookmarks: sites.51sec.org/
Learning and Sharing - 海内存知己,天涯若比邻
⚡51sec.org 🌼itprosec.com
====================================================================
Music in this video:
Alan Walker - Faded [Copyright Free Music]
• Video
Credits:
► Alan Walker
/ alanwalker
/ iamalanwalker
► FMD
/ @broma-tv

[@markusyunianto8826]

hey thanks for your tutorial, it's very helpful for me.
i have one question, can we joining the both interface 1/1 and 1/2 on the same virtual router ?

[@windogwow]

Any reason why you had to create two seperated Virtual Routers for each of the interface? would it still work just using the default virtual router?

[@windogwow]

Also, thank you for the information of the default gateway of vNet, this buggerred me a week. cheers.

[@NetSec]

Glad to help

[@oliverlu3259]

it is very help for the PAN deployment through Azure. Great job. thank you very much!!🙂

[@NetSec]

Glad to hear that!

[@getmethere9425]

Thanks Johnny for your time....

[@neelakantn3002]

Thanks - Very much informative and precise.

[@NetSec]

Glad you enjoyed it!

[@Shamshir_Shaikh]

Can you make one video to connect AWS VPC to Azure Vnet via interconnect?

[@ricewu8519]

Very good one! I'm wondering if you could indicate how to put two PA-VM's into an availability set? I haven't noticed where to configure that during the PA-VM setup. Thanks.

[@NetSec]

Great suggestion!

[@ricewu8519]

@@NetSec I saw the tutorial to put a VM into an availability set when VM is being created. Just can't find the option of availability set during PA creation.

[@Shamshir_Shaikh]

How? HA option is available there.​@@ricewu8519

[@benedictagyemang3862]

Very informative and thanks for the training.

[@BunBlake]

Hey really useful tutorial.
Could you do a tutorial of endpoints(WINDOWS VM) with UDR directly connecting to the NVA(PALO FW) .
I cant seem to make that work.

[@NetSec]

Not sure UDR and NVA part, BunBlake. Can you give a bit more details?

[@BunBlake]

@@NetSec Okay so i am trying to deploy a NVA using NGFW VM- SERIES palo alto firewall. So i am trying to do a lab environment for my end point(using windows web app). I used a user defined route to direct my end point traffic directly to the firewall. It works perfectly. However, I created another virtual network and vnet peering, my firewall VNET and my new VNET. I hosted another web application in the another vnet.
So how I do exactly UDR to the firewall?
Also, how do you internal communicate both web app traffic via the firewall?
I don't think changing the gateway on the windows network is an ideal solution right?

[@NetSec]

have you tried to use route table to create a user defined route to re-route all traffic for your subnets? In that way, you do not have to change your endpoint's gateway.

[@BunBlake]

@@NetSec Yup, finally able to grasp the concept. Thanks for your tutorial.

[@Kraatzman]

Nice Job. Thanks.

[@LeHoang-cb7ng]

How to determine the original domain address behind a IP of CDN? Thanks

[@NetSec]

Hard to find out those information. You might need to change your web server settings to get real ip if you have control your web server.

[@EyalNagar-nf6ok]

thank you very mach for this video, it really helped my :)

[@NetSec]

You're welcome!

[@pjaycastro841]

Anyone know how to get vnet-to-vnet inspection with Azure GWLB?

[@fannz66]

Good job! Thanks mate :)

[@NetSec]

Glad it helped!

[@wingwing2683]

Thanks!

[@Shamshir_Shaikh]

Thanks 😊👍

[@NetSec]

No problem 😊. Thanks for feedback