Bootstrapping Enhancements for VM-Series on Azure

At launch, bootstrap the VM-Series firewall on Azure using file storage.
The solution template in the Azure Marketplace has been updated to enable bootstrapping, and you can now use Azure file storage to upload the configuration files and licenses to easily bootstrap the VM-Series firewall at launch. In order to bootstrap successfully, you must provide the name of the storage account that holds the bootstrap folders and the keys to authenticate for access the storage account.
bootstrapping_8.1_file_storage.png
  1. Log in to the Azure portal (https://portal.azure.com).
  2. Set up the storage account with a File service. The File service allows the VM-Series firewalls to read files stored there and get provisioning information at launch.
    If you are using the solution template in the Azure marketplace to deploy the VM-Series, make sure to keep this storage account in a different resource group that the one in which you plan to deploy the firewall. This is because the solution template can be deployed in either a new or empty resource group.
    Within the File service, you must create a File share. In the File share you must Add the directory structure for the bootstrap package so that you can upload the files required for bootstrapping. Optionally, you can specify a Share-directory. If you have a common File share that serves as a repository for bootstrap configuration for different set ups, using a share-directory gives you the flexibility to create a folder hierarchy and access a specific set of sub-folders within the common File share.
    azure_bootstrap_folders.png
  3. Add the information to bootstrap the firewall, when you Deploy the VM-Series firewall.
    1. Select Enable Bootstrap yes.
    2. Enter the Storage Account Name that holds the bootstrap package.
    3. Enter the Storage Account Access Key. This firewall needs this access key to authenticate to the storage account and access the files stored in it.
      azure_storage_key.PNG
    4. Add the File share name to which you have uploaded the files required for bootstrapping the firewall. The storage account must be set up with the correct folder structure for the bootstrapping.
  4. Verify that you have successfully bootstrapped the VM-Series firewall.
    1. Select DashboardResource Groups, select the resource group.
    2. Select SettingsDeploymentsDeployment History for detailed status.
      verify_solution_template.png
  5. To publish PAN-OS metrics to Azure Application Insights, see Support for Azure Application Insights.

Related Documentation