Minimum System Requirements for the VM-Series on Azure
You must deploy the VM-Series firewall in the Azure
Resource Manager (ARM) mode only; the classic mode (Service Management
based deployments) is not supported. The VM-Series firewall on Azure
must meet the following requirements:
You can add additional disk space
of 40GB to 8TB for logging purposes. The VM-Series firewall does not
utilize the temporary disk that Azure provides.
Up to eight network interfaces (NICs). A primary interface
is required for management access and up to seven interfaces for
On Azure, because a virtual machine does not
require a network interface in each subnet, you can set up the VM-Series
firewall with just two network interfaces (one for management traffic
and one for dataplane traffic). To create zone-based policy rules
on the firewall, in addition to the management interface, you need
at least two dataplane interfaces so that you can assign one dataplane
interface to the trust zone, and the other dataplane
interface to the untrust zone.
Because the Azure
VNet is a Layer 3 network, the VM-Series firewall on Azure supports
Layer 3 interfaces only.