Provides detailed guidance on deploying the Palo Alto Networks® VM-Series firewalls to provide protection and visibility for applications on Microsoft Azure. This guide details the deployment of a Transit VNet design with two VM-Series firewall deployment options, a dedicated inbound option and a common firewall option. The reference architecture provides a hub-and-spoke design for centralized and scalable network security for resilient inbound, outbound, and east-west traffic flows.