NetQuiet
NetQuiet
  • 4
  • 24 714
How to Deploy Single Palo Alto VM in Azure [Palo Alto Part 2]
Hello Engineers and Admins,
In this video we will continue configuring a Single Palo Alto VM deployment in Azure and verifying connectivity.
For more fun tips and tricks please visit our website for blogs, videos, and more!
netquiet.com/
Переглядів: 1 376

Відео

How to Deploy Single Palo Alto VM in Azure [Palo Alto Set Up]
Переглядів 5 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a Single Palo Alto VM deployment in Azure and verifying connectivity. For more fun tips and tricks please visit our website for blogs, videos, and more! netquiet.com/
How to Deploy SDN-HA FortiGate VM in Azure [FortiGate and Fabric Connector Setup]
Переглядів 8 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a High Availability FortiGate in Azure using a Fabric Connector or SDN. We will be recreating this common topology referenced in the knowledge base below: docs.fortinet.com/document/fortigate-public-cloud/7.0.0/azure-administration-guide/983245/ha-for-fortigate-vm-on-azure github.com/fortinet/azure-templates/tree/main/FortiGate/Active-...
How To Deploy Single FortiGate VM in Azure [FortiGate and Linux Setup]
Переглядів 11 тис.2 роки тому
Hello Engineers and Admins, In this video we will configure a Single FortiGate VM deployment in Azure along with configuring a Ubuntu box to verify connectivity. We will be recreating this common topology referenced in the knowledge base below: docs.fortinet.com/document/fortigate-public-cloud/7.0.0/azure-administration-guide/632940/single-fortigate-vm-deployment For more fun tips and tricks pl...

КОМЕНТАРІ

  • @SmallvilleJW
    @SmallvilleJW 19 днів тому

    Awesome video! This was so helpful and clear. Thank you very much!

  • @andrewcullen7336
    @andrewcullen7336 Місяць тому

    You dont get enough credit for this video. The documentation does not cover anywhere close to what you go through. I searched for a long time as I could not get my failover working and asked in the official Discord and nobody helped. Watched your video and it explained it very well. Thank you for doing the video.

  • @bryanramirez1631
    @bryanramirez1631 Місяць тому

    Can you please make this exact same video for AWS

  • @sjauffer
    @sjauffer 2 місяці тому

    Hi... thanks for the video. I have 3 VM's behind the trusted network which is running web services and I need to add public IP's for each of them. How do I do this in Azure and FG firewall configuration?

  • @SrPazy-vg8tp
    @SrPazy-vg8tp 3 місяці тому

    വെരി ഗുഡ് sevice

  • @jordanfox470
    @jordanfox470 4 місяці тому

    Can you do vnet peering in azure with this?

  • @jaredgaiser3140
    @jaredgaiser3140 6 місяців тому

    Do you have to use a different resource group? for the Ubuntu VM

  • @newsnetworkz
    @newsnetworkz 10 місяців тому

    Great job 👏

  • @ajibolayusuf2057
    @ajibolayusuf2057 11 місяців тому

    Beautiful and concise! Thank you! What if I wanted to have multiple subnets in the protected subnets - would I need to make use of UDRs?

  • @williamgregoire5090
    @williamgregoire5090 Рік тому

    Is there any advantage of implementing Active/Pasive with ILB/ELB over this model with the Fabric Connector? After seeing this video I don't see any (it costs more, and I have more components to manage with additional LoadBalancers)? Thank you for your help and great video

  • @indreshpratapsingh1909
    @indreshpratapsingh1909 Рік тому

    Thank you for your clear and concise teaching style. Your videos make learning easy and enjoyable ! ✌😌

  • @jasonredwine2916
    @jasonredwine2916 Рік тому

    Best video I have seen of this yet! Both MS and FGT support sent me links to some craziness, but this was clear and concise, but, mostly, EXACTLY what MS/FGT should have produced. Thanks for doing their work! A+ video!

  • @knowledgebuddyab87
    @knowledgebuddyab87 Рік тому

    how about vnet peering? you cant have all the servers in trust subnet.

    • @FM-cw8fx
      @FM-cw8fx 8 місяців тому

      i got your point i think. Yeah you cannot add them. However, It is not necessary for the vms servers to be in trust subnet . In fact it is best if all servers vms have their own subnet and leave the trust subnet empty

  • @MonirMorshed
    @MonirMorshed Рік тому

    This video on Palo Alto on Azure is so precise and to the point. This is exactly what I need to get started with Palo Alto on Azure deployment.

  • @ashokfaujdar6367
    @ashokfaujdar6367 Рік тому

    Really helpful information and i did the similar config as you demonstrated, thanks man !

  • @vz4798
    @vz4798 Рік тому

    Can you go over how to do this on GCP? There's ZERO videos on it.

  • @mohamedabdi2245
    @mohamedabdi2245 Рік тому

    Thanks for such a great content, just a quick one! i have follow the same steps as you but i am unable to ssh to the management interface of the firewall, any steps to troubleshoot this issue please? thanks in advance

  • @nemanjaserafimovic9939
    @nemanjaserafimovic9939 Рік тому

    Thanks for this video! The best explanation of this scenario I've ever seen! Could you please cover the Active - Active scenario with Load Balancers as well?

  • @greggiombetti3784
    @greggiombetti3784 2 роки тому

    Great video! Thank you for taking the time to help.

  • @13Anant
    @13Anant 2 роки тому

    Concise and to the point. I've always used ILB/ELB for HA in Azure but it turns out the Fabric Connector is a much more efficient way of managing HA and failover. Thanks heaps :)

    • @williamgregoire5090
      @williamgregoire5090 Рік тому

      Do you know any benefits of using additional Load Balancer?

    • @13Anant
      @13Anant Рік тому

      @@williamgregoire5090 Not a lot that I can think of. With separately managed LB, you only provision one Public IP address resource for the HA stack and the load balancer monitors the backend Fortigate VMs to determine which of the two HA members the public IP address should be assigned to. It works just as fine as a Fabric connector failover but with Fabric connector approach, at least I'm not managing and paying for Internal and external load balancers.

    • @williamgregoire
      @williamgregoire Рік тому

      Great, thank you!

  • @Qua_dro
    @Qua_dro 2 роки тому

    Excellent content mate. Is it possible to zoom in a bit in your next video series. Thank you.

  • @goodupandit3640
    @goodupandit3640 2 роки тому

    I've never seen a video this beneficial before.

  • @probles124
    @probles124 2 роки тому

    @NetQuiet would you break your current VMs if you created them first before creating the firewall?

  • @DevOpsLabs4Me
    @DevOpsLabs4Me 2 роки тому

    hey man.. this was clutch! thanks

  • @KamleshKumar-Blr
    @KamleshKumar-Blr 2 роки тому

    Excellent content!

  • @marcoantonioramireztisandi897
    @marcoantonioramireztisandi897 2 роки тому

    It's a good video, really very good. Thanks for teaching!!

  • @princeboothe9200
    @princeboothe9200 2 роки тому

    If a Single VM for Fortigate was deployed and I want to add another Fortigate to create HA, can I use the marketplace or do I use the ARM template?

    • @SpacezCowboy
      @SpacezCowboy 2 роки тому

      Ever find out a method for doing this? I'm contemplating the same for an existing subscription. It's a debate between add a fortigate and do this all manually or use the template and move vm's to the new production subnet.

    • @joerivanhoof5820
      @joerivanhoof5820 2 роки тому

      The easiest is to deploy a cluster next to the existing single VM and import the config into the cluster so you can test before migration. With UDRs you can move just a single subnet to the new setup. Migrating would mean you need to have the single FGT in an Availability Set or you need to move the VM into a zone. The latest Single VM templates allow you to add a FortiGate VM into an existing AV Set or AV Zone. Secondly you need to add extra network interfaces for the HA Sync and HA mgmt. Also if you are using Basic SKU public IPs I would move them to Standard SKU IPs and use the FortiGate Active/Passive ELB/ILB setup. Faster failover and less overhead in configuring routetable sync in the SDN connector.

  • @hameednasserri5895
    @hameednasserri5895 2 роки тому

    Awesome tutorial

  • @aminderpuri640
    @aminderpuri640 2 роки тому

    Hi, I was wondering what you need to do to get the fortigate to update other routes you may have in the routing table when switching over to the secondary firewall?

  • @EyeIn_The_Sky
    @EyeIn_The_Sky 2 роки тому

    I wish you would do a tutorial showing a similar HA setup but with External and Internal Load balancers involved :/

    • @aminderpuri640
      @aminderpuri640 2 роки тому

      that would be great, just what I am looking for

  • @maquinero
    @maquinero 2 роки тому

    Hello, great video, helped me a lot. I have one question i hope you can light me up. What happen if you already have two Vnets on azure before deploying the PA? How can we "connect" those interface to the PA so the traffic can pass through the PA?? Thank you so much for your help.

  • @mikeruzich7513
    @mikeruzich7513 2 роки тому

    This video and part 2 are by far the best I have found on getting a basic setup in place for Azure. WAY BETTER than the official Palo Alto ones....

  • @neilsachy
    @neilsachy 2 роки тому

    Great video thank you

  • @devnetwise
    @devnetwise 2 роки тому

    I followed the steps and created my first ever Fortigate on Azure! Thanks

  • @georgeollis
    @georgeollis 2 роки тому

    Really good video, thanks!