Install Azure Monitoring Agent in VM with marketplace image( (Palo ALto, QRadar and SD-WAN))

Question

Can we install Azure monitoring agents (extensions) in VMs built using marketplace images - VM-Series Next-Generation Firewall from Palo Alto, IBM QRadar SIEM and Prisma SD-WAN vION. If yes, how can we do that.
Can someone help us with this.

Answer 1

Hi @SujinaSJ-1789 ,

Welcome to Microsoft Q&A! Thanks for posting the question.

I see that you are trying to install the Azure Monitor Agent extension on the VMs created using the specified marketplace image. It should not matter - how the VMs were created. As long as they have the supported pre-requisites met.

Here is the link of supported OS and other details for Azure Monitor agent: Overview of Azure Monitor agents
Also, the IP addresses and API end points used by Azure Monitor are available here: Application Insights & Log Analytics APIs

There are multiple ways to install Azure Monitor agent like:

• Using the Azure portal
• Using Resource Manager template
• Using PowerShell
• Using Azure CLI

Please let me know if you have any questions.

---

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 2

For PA VM appliances you can do that if you're using Panaroma for managing them. If not injecting direct agents are not recommended.

Answer 3

Adding the AMA to a VM images is really an unnecessary task. Azure policy is typically used to manage AMA extensions. Also, simply targeting a VM with a DCR rule will deploy the AMA extension.