Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Azure and Palo Alto Firewall Integration

Azure and Palo Alto Firewall Integration

Tips and insights into integrating your Palo Alto firewall with Azure cloud services and resources.

Mario Worwell

February 09, 2023
Tweet

More Decks by Mario Worwell

Other Decks in Technology

Transcript

  1. AZURE & PALO ALTO FIREWALLS Azure and Palo Alto Networks

    can be integrated to provide secure access to Azure resources from your on-premises Palo Alto firewall. This is achieved by deploying a Palo Alto Networks firewall in the on-premises network and configuring it to establish a secure connection (e.g., VPN) to an Azure VNET. Once the connection is established, the firewall can be used to control access to Azure resources based on security policies. Additionally, Azure Defender and/or Sentinel can be used to monitor and manage the security of the integrated environment.
  2. AZURE & PALO ALTO FIREWALLS The firewall can be also

    integrated with Azure Monitor for logging and Azure Automation for automating the tasks. Please note that, to deploy the firewall in Azure, you will need a valid license and a subscription to the Azure platform.
  3. AZURE & PALO ALTO FIREWALLS Palo Alto Networks provides a

    firewall virtual machine (VM) image for Azure, called the VM-Series firewall. This firewall can be deployed as an instance within an Azure VNET, and can be used to secure access to Azure resources and to provide secure connectivity between Azure and on-premises networks. The VM-Series firewall is available in several different sizes, based on the amount of network throughput that is required. It supports both Azure Resource Manager (ARM) and Azure classic deployment models. It also supports for Azure ExpressRoute and Azure Virtual WAN.
  4. Ø The firewall instance can be managed using the Palo

    Alto Networks Device Management (Panorama) web interface, which allows administrators to create and manage security policies, monitor network traffic, and troubleshoot issues. Additionally, the firewall can be integrated with Microsoft Defender and/or Sentinel for additional visibility and security management capabilities.