Terraform Modules for Palo Alto Networks Software Firewalls on Azure Cloud

Overview

A set of modules for using Palo Alto Networks Software Firewalls to provide control and protection to your applications running on Azure Cloud. It deploys Software Firewalls and it configures aspects such as virtual networks, subnets, network security groups, storage accounts, service principals, Panorama virtual machine instances, and more.

The design is heavily based on the Reference Architecture Guide for Azure.

For copyright and license see the LICENSE file.

Structure

This repository has the following directory structure:

• modules - this directory contains several standalone, reusable, production-grade Terraform modules. Each module is individually documented.
• examples - this directory shows examples of different ways to combine the modules contained in the modules directory. \ Notice, this code should NOT be used directly in production. It might contain examples of sensitive data that normally should not be kept in a repository.

Security

Please keep in mind that modules hosted in this repository require sensitive data to work, like: passwords, firewall bootstrap options, etc. We do not provide a mechanism to safely store this information. It's up to you to make sure this data is safely kept.

Examples provided here are a form of documentation - they should help you understand how to use the modules. They were not written with security in mind. They are here to demonstrate how to utilize code available in this repository and sometimes it's not possible to do it w/o providing variables or data that normally (in production) would not be kept in a VCS.

So before you use this code for something different than training please keep in mind to follow all Terraform and your organization's security best practices.

Compatibility

The compatibility with Terraform is defined individually per each module. In general, expect the earliest compatible Terraform version to be 1.0.0 across most of the modules.

Versioning

These modules follow the principles of Semantic Versioning. You can find each new release, along with the changelog, on the GitHub Releases page.

Getting Help

If you have found a bug, please report it. The preferred way is to create a new issue on the GitHub issue page.

For consulting support, please contact services-sales@paloaltonetworks.com or your Palo Alto Networks account manager.

Contributing

Contributions are welcome, and they are greatly appreciated! Every little bit helps, and credit will always be given. Please follow our contributing guide.