What’s New in Panorama Plugin for Azure 2.0.0
The following topics describe the features introduced in this release.
Auto Scale the VM-Series Firewall on Azure
Palo Alto Networks now provides templates to help you deploy an auto-scaling tier of VM-Series firewalls using several Azure services such as Virtual Machine Scale Sets, Azure Application Insights, Azure load balancers, Azure functions, Panorama and the Panorama plugin for Azure, and the VM-Series automation capabilities including the PAN-OS API and bootstrapping. The Azure Auto Scaling Version 1.0 templates allow you to leverage the scalability features on Azure that are designed to manage sudden surges in demand for application workload resources by independently scaling VM-Series firewalls in response to changing workloads.
Secure Kubernetes Services in an Azure Kubernetes Cluster
To secure Azure Kubernetes services (AKS), you must first install the Azure plugin for Panorama, and the Azure auto scaling solution. The auto scaling templates use information about your network and your resources to create a hub and spoke architecture and deploy an auto-scaling tier of VM-Series firewalls in a spoke Virtual Network (VNet).The AKS version 1.0 templates work with your auto scaling deployment to deploy an AKS cluster in a new Azure VNet. The Azure plugin helps you configure a connection that can monitor Azure Kubernetes cluster workloads, harvesting services you have annotated as “internal load balancer” and automatically creating tags you can use in Panorama dynamic address groups. You can leverage dynamic address groups to apply Security Policy on inbound traffic routed to services running on your AKS cluster.
Minimum Versions for Azure Auto Scaling and Azure Kubernetes
Panorama Management Server
The following table lists the minimum versions you must install on Panorama.
- Panorama can manage firewalls that have the same version or earlier. You must install the VM-Series plugin so that Panorama can manage VM-Series firewalls running 9.0.1 and later.To upgrade the VM-Series plugin, download it from the Customer Support portal, upload to Panorama, and install.Unlike PAN-OS 9.0.0 and later, Panorama does not include the VM-Series plugin by default. After the manual installation,does not detect changes in the VM-Series plugin version.PanoramaPluginsCheck Now
- You can download and install the Azure plugin on Panorama version 2.0 from. You can also download it from the Customer Support portal, and manually upload and install the plugin on Panorama.PanoramaPlugins
- If you have an Azure plugin on Panorama version 1.0 deployment, you can use version 2.0 to manage your existing firewalls (assuming they meet the minimum PAN-OS requirements), but you must redeploy using the Azure plugin version 2.0.
The minimum versions for managed firewalls are as follows:
PAN-OS on VM-Series
8.1.8 and later
9.0.3 and later
1.0.4 and later.
Recommended For You
Recommended videos not found.