- 4
- 24 714
NetQuiet
Приєднався 28 гру 2021
Hoping to provide technical knowledge to all levels of engineers and administrators out in the wild. Also please do not ask me about spanning tree.
For more fun tips and tricks please visit our website for blogs, videos, and more!
netquiet.com/
For more fun tips and tricks please visit our website for blogs, videos, and more!
netquiet.com/
How to Deploy Single Palo Alto VM in Azure [Palo Alto Part 2]
Hello Engineers and Admins,
In this video we will continue configuring a Single Palo Alto VM deployment in Azure and verifying connectivity.
For more fun tips and tricks please visit our website for blogs, videos, and more!
netquiet.com/
In this video we will continue configuring a Single Palo Alto VM deployment in Azure and verifying connectivity.
For more fun tips and tricks please visit our website for blogs, videos, and more!
netquiet.com/
Переглядів: 1 376
Відео
How to Deploy Single Palo Alto VM in Azure [Palo Alto Set Up]
Переглядів 5 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a Single Palo Alto VM deployment in Azure and verifying connectivity. For more fun tips and tricks please visit our website for blogs, videos, and more! netquiet.com/
How to Deploy SDN-HA FortiGate VM in Azure [FortiGate and Fabric Connector Setup]
Переглядів 8 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a High Availability FortiGate in Azure using a Fabric Connector or SDN. We will be recreating this common topology referenced in the knowledge base below: docs.fortinet.com/document/fortigate-public-cloud/7.0.0/azure-administration-guide/983245/ha-for-fortigate-vm-on-azure github.com/fortinet/azure-templates/tree/main/FortiGate/Active-...
How To Deploy Single FortiGate VM in Azure [FortiGate and Linux Setup]
Переглядів 11 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a Single FortiGate VM deployment in Azure along with configuring a Ubuntu box to verify connectivity. We will be recreating this common topology referenced in the knowledge base below: docs.fortinet.com/document/fortigate-public-cloud/7.0.0/azure-administration-guide/632940/single-fortigate-vm-deployment For more fun tips and tricks pl...
Awesome video! This was so helpful and clear. Thank you very much!
You dont get enough credit for this video. The documentation does not cover anywhere close to what you go through. I searched for a long time as I could not get my failover working and asked in the official Discord and nobody helped. Watched your video and it explained it very well. Thank you for doing the video.
Can you please make this exact same video for AWS
Hi... thanks for the video. I have 3 VM's behind the trusted network which is running web services and I need to add public IP's for each of them. How do I do this in Azure and FG firewall configuration?
വെരി ഗുഡ് sevice
Can you do vnet peering in azure with this?
Do you have to use a different resource group? for the Ubuntu VM
Great job 👏
Beautiful and concise! Thank you! What if I wanted to have multiple subnets in the protected subnets - would I need to make use of UDRs?
Is there any advantage of implementing Active/Pasive with ILB/ELB over this model with the Fabric Connector? After seeing this video I don't see any (it costs more, and I have more components to manage with additional LoadBalancers)? Thank you for your help and great video
Thank you for your clear and concise teaching style. Your videos make learning easy and enjoyable ! ✌😌
Best video I have seen of this yet! Both MS and FGT support sent me links to some craziness, but this was clear and concise, but, mostly, EXACTLY what MS/FGT should have produced. Thanks for doing their work! A+ video!
how about vnet peering? you cant have all the servers in trust subnet.
i got your point i think. Yeah you cannot add them. However, It is not necessary for the vms servers to be in trust subnet . In fact it is best if all servers vms have their own subnet and leave the trust subnet empty
This video on Palo Alto on Azure is so precise and to the point. This is exactly what I need to get started with Palo Alto on Azure deployment.
Really helpful information and i did the similar config as you demonstrated, thanks man !
Can you go over how to do this on GCP? There's ZERO videos on it.
Thanks for such a great content, just a quick one! i have follow the same steps as you but i am unable to ssh to the management interface of the firewall, any steps to troubleshoot this issue please? thanks in advance
Thanks for this video! The best explanation of this scenario I've ever seen! Could you please cover the Active - Active scenario with Load Balancers as well?
Great video! Thank you for taking the time to help.
Concise and to the point. I've always used ILB/ELB for HA in Azure but it turns out the Fabric Connector is a much more efficient way of managing HA and failover. Thanks heaps :)
Do you know any benefits of using additional Load Balancer?
@@williamgregoire5090 Not a lot that I can think of. With separately managed LB, you only provision one Public IP address resource for the HA stack and the load balancer monitors the backend Fortigate VMs to determine which of the two HA members the public IP address should be assigned to. It works just as fine as a Fabric connector failover but with Fabric connector approach, at least I'm not managing and paying for Internal and external load balancers.
Great, thank you!
Excellent content mate. Is it possible to zoom in a bit in your next video series. Thank you.
I've never seen a video this beneficial before.
@NetQuiet would you break your current VMs if you created them first before creating the firewall?
hey man.. this was clutch! thanks
Excellent content!
It's a good video, really very good. Thanks for teaching!!
If a Single VM for Fortigate was deployed and I want to add another Fortigate to create HA, can I use the marketplace or do I use the ARM template?
Ever find out a method for doing this? I'm contemplating the same for an existing subscription. It's a debate between add a fortigate and do this all manually or use the template and move vm's to the new production subnet.
The easiest is to deploy a cluster next to the existing single VM and import the config into the cluster so you can test before migration. With UDRs you can move just a single subnet to the new setup. Migrating would mean you need to have the single FGT in an Availability Set or you need to move the VM into a zone. The latest Single VM templates allow you to add a FortiGate VM into an existing AV Set or AV Zone. Secondly you need to add extra network interfaces for the HA Sync and HA mgmt. Also if you are using Basic SKU public IPs I would move them to Standard SKU IPs and use the FortiGate Active/Passive ELB/ILB setup. Faster failover and less overhead in configuring routetable sync in the SDN connector.
Awesome tutorial
Hi, I was wondering what you need to do to get the fortigate to update other routes you may have in the routing table when switching over to the secondary firewall?
I wish you would do a tutorial showing a similar HA setup but with External and Internal Load balancers involved :/
that would be great, just what I am looking for
Hello, great video, helped me a lot. I have one question i hope you can light me up. What happen if you already have two Vnets on azure before deploying the PA? How can we "connect" those interface to the PA so the traffic can pass through the PA?? Thank you so much for your help.
This video and part 2 are by far the best I have found on getting a basic setup in place for Azure. WAY BETTER than the official Palo Alto ones....
Great video thank you
I followed the steps and created my first ever Fortigate on Azure! Thanks
Glad it helped!
Really good video, thanks!
Glad you liked it!