Deploying Azure Gateways and Firewalls using PowerShell

Any user who runs this command through Azure PowerShell must have admin permissions for the Azure Private Marketplace.

Please see this article for general instructions about adding offers to your Azure Private Marketplace.

Listing Aviatrix Available Images

  1. Log into Azure PowerShell.

  2. Use the following PowerShell command to get a list of possible Aviatrix Azure Companion Gateway Images so you can choose one to add to the marketplace:

    az vm image list --publisher aviatrix --all
"architecture": "x64",
"offer": "aviatrix-companion-gateway-v10",
"publisher": "aviatrix-systems",
"sku": "aviatrix-companion-gateway-v10",
"urn": "aviatrix-systems:aviatrix-companion-gateway-v10:aviatrix-companion-gateway-v10:6.7.7",
"version": "6.7.7"

Retrieving the PrivateStoreID

  1. Log into your Azure account.

  2. Install the Az. Marketplace PowerShell module using this command:

    Install-Module -Name Az.Marketplace

  3. Next, retrieve a list of private stores created in this Azure tenant to retrieve the PrivateStoreID you need to install on the Private Marketplace. Use this command:

    Get-AzMarketplacePrivateStore.

    The output generated includes your Private Store ID.

  4. Now, validate the offer. Use this command:

    Get-AzMarketplacePrivateStoreOffer -PrivateStoreId <PS_id> -OfferId <UniqueOfferId>

    • For <PS_id>, use the PrivateStoreID you retrieved.

    • For <UniqueOfferId>, use publisherId.offerId.

  • If there is no output (or code 'BadRequest'), this means the offer is not in your Private Store. Go to step 5.

  • If the command responded with the output, this means the offer is already in your Private Store - go to step 5.

  1. Use the PrivateStoreId from step 4 and follow the steps below to add the offer to your Private Store.

Adding the Aviatrix Firewall Offer to Your Private Marketplace

Repeat the steps above to add an offer for the Azure Firewall to your Private Marketplace. Use the table below to find the correct Publisher and OfferID.

Name Publisher Offer (plan product) SKU (plan name)

PAN

paloaltonetworks

vmseries1, vmseries-flex

bundle1, bundle2, byol

Fortinet

fortinet

fortinet_fortigate-vm_v5

fortinet_fg-vm fortinet_fg-vm_payg fortinet_fg-vm_payg_20190624

Check Point

checkpoint

check-point-cg-r81, check-point-cg-r8110

sg-ngtp, sg-ngtx, sg-byol, mgmt-byol

After following these steps, you can deploy Azure Firewalls from your Azure Private Marketplace through the Aviatrix Controller.