Secure inbound traffic in a brownfield deployment
—If
you have applications deployed in one or more VNets that are peered
with the VNet which hosts an Application Gateway and directs traffic
to these applications, you can now deploy an auto scaling set of
VM-Series firewalls to create a security VNet topology as shown
in the following topology diagram. To secure inbound web traffic
for an internet-facing application in a brownfield deployment, you require
Panorama, the Azure plugin for Panorama, the Infrastructure template,
and the Inbound Firewall template. When providing the inputs for the
Inbound Firewall template, you must provide the details for the
existing VNet.