Bootstrap the VM-Series Firewall on Azure
The VM-Series firewall on Azure supports Azure Files service for bootstrapping. To manage the bootstrap package for the VM-Series firewall on Azure, you must be familiar with storage accounts on Azure and know how to create a file share and directory objects that contain the folder structure required for the bootstrap package. You can share an Azure file share across many virtual machines so that all firewalls deployed in the same region as the storage account that hosts the file share can access the files concurrently.
The management interface of the VM-Series firewall must be able to access the file share that holds the bootstrap package so that it can complete bootstrapping.
- Set up the bootstrap package within an Azure Files
- On the Azure portal, select or create a storage account.
- Create a file share within the Azure Files service.
- Create the folders within the storage account.
- Createthe top-level directory structure for the bootstrap package directly in the root folder.
- Add content within each folder. You can leave a folder empty but you must have all four folders in the directory. In the following screenshot, you can see that the config folder has the init-cfg.txt file uploaded to it.
the VM-Series Firewall from the Azure Marketplace (Solution Template).
When launching the firewall, select Enable Bootstrap:Yes and
provide the information required to access the file share that holds
the bootstrap files.
- Storage Account Name— This is the Azure storage account in which you created the file share for the bootstrap folders.
- Storage Account Access Key—The firewall needs this access key to authenticate to the storage account and access the files stored within. To copy this access key, select the storage account name, and then select SetttingsAccess Keys.
- File-share—This is the file-share name to which you have uploaded the files required for bootstrapping the firewall.Optionally, you can specify a Share-directory. If you have a common file share that serves as a repository for bootstrap configuration for different set ups, you can us a share-directory to be able to create a folder hierarchy and access a specific set of subfolders within the common file-share.
- Verify Bootstrap Completion.
Bootstrapping Enhancements for VM-Series on Azure
At launch, bootstrap the VM-Series firewall on Azure using file storage. ...
Deploy the VM-Series Firewall on Azure (Solution Template)
Deploy the VM-Series Firewall from the Azure Marketplace (Solution Template) The following instructions describe how to deploy the solution template for the VM-Series firewall that ...
Bootstrap the VM-Series Firewall
Bootstrap the VM-Series Firewall Bootstrapping allows you to create a repeatable and streamlined process of deploying new VM-Series firewalls on your network because it allows ...
Bootstrap the VM-Series Firewall on Google Cloud Platform
Bootstrap the VM-Series Firewall on Google Cloud Platform To bootstrap you must create a specific file structure in a Google storage bucket. You provide the ...
VM-Series Firewall Templates on Azure
VM-Series Firewall Templates on Azure You can deploy the VM-Series firewall on Azure using templates. Palo Alto Networks provides two kinds of templates—Solution templates and ...
VM-Series Firewall Bootstrap Workflow
VM-Series Firewall Bootstrap Workflow After you familiarize yourself with the Bootstrap Package and assess whether you will want to fully configure the firewall or use ...
Bootstrap Package The bootstrap process is initiated only on first boot when the firewall is in a factory default state. When you attach the virtual ...
Use the ARM Template to Deploy the VM-Series Firewall
Use the ARM Template to Deploy the VM-Series Firewall In addition to Marketplace based deployments, Palo Alto Networks provides a GitHub repository which hosts sample ...
Describes all the exciting new capabilities in PAN-OS® 8.1 for the VM-Series firewall. ...