What is Cloud NGFW by Palo Alto Networks - an Azure Native ISV Service?

Azure Native ISV Services enable you to easily provision, manage, and tightly integrate independent software vendor (ISV) software and services on Azure. This Azure Native ISV Service is developed and managed by Microsoft and Palo Alto Networks.

You can find Cloud Next-Generation Firewall by Palo Alto Networks - an Azure Native ISV Service in the Azure portal or get it on Azure Marketplace.

Palo Alto Networks is leading provider of cloud security, offering next-generation cybersecurity to thousands of customers globally, across all sectors. With the integration of Cloud Next-Generation Firewall by Palo Alto for Azure into the Azure ecosystem we are delivering an integrated experience and empowering a growing ecosystem of developers and customers to help protect their organizations on Azure.

The Palo Alto Networks offering in the Azure Marketplace allows you to manage the Cloud Next-Generation Firewall by Palo Alto Networks resources in the Azure portal as an integrated service. It enables you to easily utilize Palo Alto Networks best-in-class network security capabilities on Azure, and you can manage it using either Palo Alto Networks Panorama policy management solution or directly from the Azure portal. Cloud Next-Generation Firewall by Palo Alto - an Azure Native ISV Service combines the scalability and reliability of Microsoft Azure with Palo Alto Networks deep expertise in network security.

You can create and manage Palo Alto Networks resources through the Azure portal. You can set up the Cloud Next-Generation Firewall by Palo Alto Networks resources through a resource provider named PaloAltoNetworks.Cloudngfw. Palo Alto Networks owns and runs the software as a service (SaaS) application including the accounts created.

Here are the key capabilities provided by the Palo Alto integration:

  • Seamless onboarding of Palo Alto software as an integrated service on Azure.
  • Unified billing of Palo Alto through Azure monthly billing.
  • Single-Sign on to Palo Alto - No separate sign-up needed from Palo Alto portal.
  • Manage VNET and VWAN traffic to use existing configuration (.conf) files for Palo Alto deployment.

Pre-requisites for Cloud NGFW by Palo Alto Networks

  • Subscription owner
    • Cloud NGFW by Palo Alto Networks resource can only be set up by users who have Owner access on the Azure subscription. Ensure you have the appropriate Owner access before starting to set up this integration.

Find the Palo Alto Network offerings in the Azure Marketplace

  1. Navigate to the Azure Marketplace page.

  2. Search for Palo Alto. Select Cloud Next-Generation Firewall by Palo Alto.

  3. In the Marketplace, you see the offer for Cloud Next-Generation Firewall by Palo Alto Networks - an Azure Native ISV Service. Select, Subscribe.

    Screenshot of Cloud NGFW by Palo Alto Networks in the Azure Marketplace.

  4. In the working pane, you see the options from Palo Alto Networks. Select Create in Cloud NGFW by Palo Alto Networks.

    Screenshot showing the two offerings from Palo Alto Networks.

  5. The Create form opens in the working pane.

Next steps

To create an instance of Palo Alto, see QuickStart: Get started with Palo Alto.