question

ZachOlson-1229 avatar image
0 Votes"
ZachOlson-1229 asked AndreasBaumgarten answered

Assign a public IP to a Palo Alto Virtual Firewall

I am deploying a Palo Alto Networks firewall into my Azure test environment and am having a little trouble figuring out how to get a public IP attached to my untrust interface.

I have 3 interfaces associated to the Palo Alto (MGT, Untrust, Trust). The MGT NIC has a public IP association and I am able to reach that IP from the internet to manage the firewall.

The untrust interface has a private IP of 10.1.1.254, the trust interface has a private IP of 10.1.2.254.

I created in my resource group a second public IP for the Palo Alto and assigned it as the public IP on the untrust nic.

My trust and untrust NICs are currently configured for DHCP, allowing them to pull their respective IPs from Azure. This works fine for the private IP but leaves me wondering how to make this work for the public IP.

Thanks!

azure-virtual-network
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

GitaraniSharmaMSFT-4262 avatar image
0 Votes"
GitaraniSharmaMSFT-4262 answered

Hello @ZachOlson-1229 ,

Palo Alto Virtual Firewall is a 3rd party VM series Firewall available in Azure Marketplace for deploying and hence the documentation for its configuration are provided by Palo Alto support team. You may refer the below article for step by step instructions on how to deploy Palo Alto Firewall in Azure:
https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/deploy-the-vm-series-firewall-on-azure-solution-template.html

Step-4 of this article shows how to attach a Public IP to the untrust interface of the Palo Alto Firewall.

Kindly let us know if the above helps or you need further assistance on this issue.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AndreasBaumgarten avatar image
0 Votes"
AndreasBaumgarten answered

Hi @ZachOlson-1229 ,

the IP config of an Azure Public IP can be done here:

88508-image.png


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten



image.png (208.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.