Focus

VM-Series Deployment Guide

Enable Azure Application Insights on the VM-Series Firewall

Table of Contents

Enable Azure Application Insights on the VM-Series Firewall

Publish firewall performance metrics to Application Insights.

The VM-Series firewall on Azure can publish custom PAN-OS metrics natively to Azure Application Insights that you can use to monitor the firewalls directly from the Azure portal. These metrics allow you to assess performance and usage patterns that you can use to set alarms and take action to automate events such as launching or terminating instances of the VM-Series firewalls. See Custom PAN-OS Metrics Published for Monitoring for a description on the metrics that are available.

On the Azure portal, create your Application Insights instance to monitor the firewall and copy the Instrumentation Key from ConfigureProperties.
The firewall needs this key to authenticate to the Application Insights instance and publish metrics to it. See VM-Series on Azure Service Principal Permissions for the permissions required.
Enable the firewall to publish metrics to your Application Insights instance.
1. Log in to the VM-Series firewall on Azure.
2. Select DeviceVM-SeriesAzure.
3. Edit Azure Application Insights and enter the Instrumentation Key you copied earlier.
  The default interval for publishing metrics is five minutes. You can change this to vary from 1-60 minutes.
4. Commit your changes.
  The firewall generates a system log to it record the success or failure to authenticate to Azure Application Insights.
Verify that you can view the metrics on the Azure Application Insights dashboard.
1. On the Azure portal, select the Application Insights instance, and select MonitoringMetrics to view the PAN-OS custom metrics.
2. Select the metric(s) that you want to monitor for trends and trigger alerts. Refer to the Microsoft Azure documentation for details on exploring metrics on Application Insights.

Deploy the VM-Series Firewall on Azure Stack

Monitoring on Azure