This is a "non official" repository for Azure Resoure Manager (ARM) templates to deploy VM-Series Next-Generation firewall from Palo Alto Networks into the Azure public cloud. The initial driver for this repository was that I wanted to modified the PaloAltoNetworks template to enable the ability to deploy a firewall with 4 interfaces. Mgmt, Trust, Untrust, and Restricted. There are two flavors in this repository, one that does includes a deployemnt of an availability set and the other does not.
I have create a few other deployment scenarios to deploy a more functioning solution to make it easier to quickly build an basic working environment.
Documentation
NOTE:
- Deploying ARM templates requires some customization of the ARM JSON template. Please review the basic structure of ARM templates.
- Before you use the custom ARM templates here, you must first deploy the related VM from the Azure Marketplace into the intended/destination Azure location. This enables programmatic access (i.e. template-based deployment) to deploy the VM from Azure Marketplace. You can then delete the Marketplace-based deployment if you don't need it.
- For example, if you plan to use a custom ARM template to deploy a BYOL VM of VM-Series into Australia-East, then first deploy the BYOL VM from Marketplace into Australia. This is needed only the first time. You can then delete this VM and its related resources. Now your ARM templates, from GitHub or via CLI, will work.
- When deploying an ARM template you may see the following error if above steps have not been done once for each SKU:
"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state
'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"ImageNotFound\",\r\n \"message\":
\"The platform image 'paloaltonetworks:vmseries1:byol:latest' is not available.
Verify that all fields in the storage profile are correct.\"