VM-Series for Microsoft Azure

This is a repository for Azure Resoure Manager (ARM) templates to deploy VM-Series Next-Generation firewall from Palo Alto Networks in to the Azure public cloud.

VM-Series in Azure Marketplace:

• Bring Your Own License - BYOL
• Pay-As-You-Go (PAYG) Hourly Bundle 1 and Bundle 2

Documentation

• Technical documentation
• VM-Series Datasheet PDF
• Deploying ARM Templates

NOTE:

• Deploying ARM templates requires some expertise and customization of the ARM JSON template. Please review the basic structure of ARM templates.

• Most of the templates in this repository typically use the BYOL version of VM-Series. If you want to use a different SKU then you can edit the azureDeploy.json template to set the "imageSku" variable to use "byol", "bundle1" or "bundle2":

  "imagePublisher": "paloaltonetworks",
  "imageSku":       "byol",
  "imageOffer" :    "vmseries1",
  "imageVersion":   "latest"

• By default, if "imageVersion" is not specified then the latest PAN-OS version available in Azure Marketplace is used (equivalent to writing "imageVersion": "latest"). To use a specific PAN-OS version available in the Azure Marketplace, set it as "imageVersion": "8.0.0" or "imageVersion": "7.1.1". For an example on setting the PAN-OS version see the following template: https://github.com/PaloAltoNetworks/azure/tree/master/vmseries-avset

• Before you use the custom ARM templates here, you must first deploy the related VM from the Azure Marketplace into the intended/destination Azure location. This enables programmatic access (i.e. template-based deployment) to deploy the VM from Azure Marketplace. You can then delete the Marketplace-based deployment if you don't need it.

• For example, if you plan to use a custom ARM template to deploy a BYOL VM of VM-Series into Australia-East, then first deploy the BYOL VM from Marketplace into Australia. This is needed only the first time. You can then delete this VM and its related resources. Now your ARM templates, from GitHub or via CLI, will work.

• The older Marketplace listing VM-Series (BYOL) Solution Template is deprecated; please do not use this template. Use the above listings in the Marketplace.

Proceed with Caution:

These repositories contain default password information and should be used for Proof of Concept purposes only. If you wish to use this template in a production environment it is your responsibility to change the default passwords.