The VM Monitoring solution for Microsoft® Azure® allows
you to track the virtual machine inventory within your Azure subscriptions
so that you can consistently enforce Security policy that automatically
adapts to changes within your Azure deployment. As virtual machines
are provisioned, de-provisioned or moved, this solution allows you
to collect the IP addresses and the associated set of attributes (or
metadata elements) as tags. You can then use the tags to define Dynamic Address Groups and
use them in Security policy.
The Azure plugin requires Panorama 8.1.3 or later. You can download
the Azure plugin from the Customer Support Portal or directly from
can push the virtual machine attributes that it retrieves to firewalls running
PAN-OS 8.0 and later.