This template deploys a firewall environment that includes:

• Two Palo Alto Networks Firewalls
• 1 Linux Web Server
• 1 Linux Dev Server
• One Egress Load Balancer (LB-Egress)
• Multiple Subnets and UDRs to support the traffic flow

This template creates all the infrastructure and appropriate UDRs in the 10.0.0.0/16 VNET. Post-deployment tasks include:

• Licensing the FW (Currently set for Bundle2, set to BYOL if you wish to use your own licensing)
• Configuring the FW (select and import the fw-config file that matches your licensing)
• Installation/configuration of the Apache Web Server software

To Deploy ARM Template using Azure CLI in ARM mode

• Download the two JSON files: azureDeploy.json and azureDeploy.parameters.json
• Customize the azureDeploy.parameters.json file and then deploy it from your computer.
• Install the latest Azure CLI for your computer.
• Validate and deploy the ARM template: azure login azure config mode arm azure group template validate -g YourResourceGroupName
  -e azureDeploy.json -f azureDeploy.parameters.json azure group create -v -n YourResourceGroupName -l YourAzureRegion
  -d YourDeploymentLabel -f azureDeploy.json -e azureDeploy.parameters.json

To check the status of your deployment:

• Via CLI: azure vm show -g YourResourceGroupName -n YourDeploymentLabel
• Via Azure Portal: Your Resource Group > Deployment or Alert Logs

The FW configurations provided in files multi-ip-fw1 and multi-ip-fw2 are designed to be used in a default deployment by updating the NAT rule with the public IP address of the LB-Public Load Balancer. Additional modifications may be required for use with a custom template deployment.