Deploy Using the

Prisma SD-WAN

Azure Deployment Template

Log in to the Azure Portal and navigate to the Marketplace. Search for
Prisma SD-WAN vION Solution Template for Azure Cloud
and select
Create
.

In the
Basic
tab you will have the following options:
Subscription
: Select the appropriate Azure subscription you wish to use to deploy the Virtual Appliance.
Resource Group
: Create a new resource group to deploy the Virtual ION and associated resources.
In this release you can only deploy a new resource group, you cannot use an existing resource group.
Region
: Select the Azure Compute Region where you want to deploy the Virtual Appliance.

Select Next:
Prisma SD-WAN
vION network config.
On the
Prisma SD-WAN vION network config
tab you will have the following options:
Virtual Network
Virtual Network: transitVNET
Controller Subnet: 10.x.0.0/24
Internet/Public Subnet: 10.x.1.0/24
LAN/Private Subnet: 10.x.2.0/24
Network Security Group: Inbound source IP
The NSG by default will allow only UDP 500/4500 inbound. If you wish to modify the sources you can specify here. It is recommended to leave this as the default 0.0.0.0/0 setting.


These are the default values, if you want to customize these settings select
Create new
and complete.
If using a custom VNET ensure that each of the subnets is at least a /29 and falls within the range of the VNET address range you select.

Once complete, click on Next:
Prisma SD-WAN
vION Configuration.
On the
Prisma SD-WAN vION Configuration
tab complete the following:
Public IP address: Name of the Public IP Address for Port 1 that will be created.
Domain name label: Must be unique
Private IP Address: IP address in the Internet Subnet that will be assigned to the Virtual IONs Port 1 interface.
Azure reserves the first 3 IPs in any subnet, chose at least the 4th available IP addresses in the Internet Subnet.
Gateway: First IP address from the Internet Subnet
DNS: DNS IP address for Port 1, you can use Azure’s own DNS 168.63.129.16 or any public DNS for example 8.8.8.8 or 1.1.1.1.
Prisma SD-WAN
vION Version: Software version of the Virtual Appliance to deploy, recommended to use the latest version.
Prisma SD-WAN
vION Licence Key: Use the License Key that was generated from the
Prisma SD-WAN
portal.
Prisma SD-WAN
vION Secret Key: Use the License Key that was generated from the
Prisma SD-WAN
portal.
Virtual Machine Size: Leave at the default selection.

Click on Next: Review + Create now Azure will validate the configuration against the deployment template.

Once validated, click
Create
to deploy the virtual appliance.