The VM-Series firewall on Azure must be deployed in
a virtual network (VNet) using the Resource Manager deployment mode.
You can deploy the VM-Series firewall on the standard Azure public
cloud, Azure China, and Azure Government—including DoD on Azure
Government, which meets the security requirements for DoD Impact Level
5 data and FedRAMP High standards.
The VM-Series firewall on the marketplace for the Azure public
cloud, Azure Government, and Azure DoD regions, supports both the
Bring Your Own License (BYOL) model and the hourly Pay-As-You-Go
(PAYG) option (usage-based licensing) For licensing details, see License
Types—VM-Series Firewalls, and refer to the list of supported Azure regions in which you can
deploy the VM-Series firewall.
You can also deploy the VM-Series firewall on Azure Stack, Microsoft's
private cloud solution that enables you to use Azure services within
your organization's datacenter. With Azure Stack, you can build
out a hybrid cloud solution that unifies your public Azure deployment
with your on-premise Azure Stack set up. You can download the VM-Series
firewall BYOL offer from the Azure Marketplace and make it available
to your tenants on Azure Stack. For instructions, see Deploy
the VM-Series Firewall on Azure Stack.