Deploying a firewall in Azure
Very differently from a locally deployed VM firewall, you do not need to find an appropriate installation package from the Palo Alto support portal download page, but instead need to go through the Azure Marketplace.
From the home screen, type marketplace
in the search bar and click Marketplace when it appears in the search results.
Once in the Marketplace, search for palo
alto
vm
and select VM-Series Next-Generation Firewall from Palo Alto Networks from the available options, as illustrated in the next screenshot:

Figure 15.3: Selecting the VM series NGFW
On the next screen, you will be presented with the plan options:
- Single VM-series Firewall is just a standalone firewall
- High Resiliency with Load Balancers is a set of 2 firewalls that get deployed with load balancers in one of the following constellations:
- Common Firewall set with Load Balancers is a “load balancer sandwich” with the firewalls...