Set-up, configure and Deploy a Palo Alto firewall solution in MS Azure

• will architect, setup, and manage a Palo Alto VM-series instance in Microsoft Azure to provide security perimeter services to the RDS instance • This firewall will be configured with a rule-set that will only allow IP addresses originating in the United States to access the RDS server • The Palo Alto will replace the security perimeter functions currently provided by the Cisco ASAv • The ASAv will continue to be utilized providing remote access to the Azure environment with Cisco Anyconnect • This project is intended to lay a new security foundation utilizing the Palo Alto to replace the existing security perimeter and to add the additional feature of geo-filtering • It is expected that Post will explore the other security features offered by the Palo Alto VM-series device with future projects Project Deliverables • Configure Palo Alto VM-Series Pay as you go subscription • Launch Palo Alto VM-Series instance • Configure routing, security policy, and geographical filter to replace existing ruleset on the Cisco ASAv • Coordinate change window with Post to move RDS server into new DMZ provide by the Palo Alto VM-series instance • Configure test VM in ZONE to confirm that Geo-filtering is blocking connection attempts to RDS from IP addresses outside of the US • Provide detailed network drawing showing final network details of the VM-series device