This template deploys a firewall environment that includes:

• Two Palo Alto Networks Firewalls (3 interfaces per firewall)
• One Standard SKU External Load Balancer (LB-Public)
• One Standard SKU Internal Load Balancer (LB-Egress)
• 1 Linux Web Server
• 1 Linux Dev Server
• Network Security Group and related subnet associations to allow Standard SKU Load Balancer functionality
• Multiple Subnets and UDRs to support the traffic flow

This template creates all the infrastructure and appropriate UDRs in the 10.0.0.0/16 VNET.

Post-deployment tasks include:

• Licensing the FW (if you selected the byol license type)
• Configuring the FW (download, import, and commit the fw-config file that matches your licensing)
• Update the Inbound HTTP NAT rule destination address with the Public IP of the External Load Balancer
• Installation/configuration of the Apache Web Server software on the Web Server (sudo apt-get update; sudo apt-get install apache2 -y)

To Deploy ARM Template using Azure CLI in ARM mode

• Download the two JSON files: azureDeploy.json and azureDeploy.parameters.json
• Customize the azureDeploy.parameters.json file and then deploy it from your computer.
• Install the latest Azure CLI for your computer.
• Validate and deploy the ARM template: azure login azure config mode arm azure group template validate -g YourResourceGroupName
  -e azureDeploy.json -f azureDeploy.parameters.json azure group create -v -n YourResourceGroupName -l YourAzureRegion
  -d YourDeploymentLabel -f azureDeploy.json -e azureDeploy.parameters.json

To check the status of your deployment:

• Via CLI: azure vm show -g YourResourceGroupName -n YourDeploymentLabel
• Via Azure Portal: Your Resource Group > Deployment or Alert Logs