Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Classic
  3. API Docs
  4. paloalto
  5. NextGenerationFirewallVirtualHubPanorama

We recommend using Azure Native.

Azure v6.23.0 published on Thursday, May 22, 2025 by Pulumi
pulumi/pulumi-azure

azure.paloalto.NextGenerationFirewallVirtualHubPanorama

Explore with Pulumi AI

azure logo

We recommend using Azure Native.

Azure v6.23.0 published on Thursday, May 22, 2025 by Pulumi
pulumi/pulumi-azure

    Manages a Palo Alto Next Generation Firewall VHub Panorama.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";

const example = new azure.core.ResourceGroup("example", {
    name: "example-resources",
    location: "West Europe",
});
const examplePublicIp = new azure.network.PublicIp("example", {
    name: "acceptanceTestPublicIp1",
    resourceGroupName: example.name,
    location: example.location,
    allocationMethod: "Static",
    tags: {
        environment: "Production",
    },
});
const exampleVirtualWan = new azure.network.VirtualWan("example", {
    name: "example-virtualwan",
    resourceGroupName: example.name,
    location: example.location,
});
const exampleVirtualHub = new azure.network.VirtualHub("example", {
    name: "example-virtualhub",
    resourceGroupName: example.name,
    location: example.location,
    virtualWanId: exampleVirtualWan.id,
    addressPrefix: "10.0.0.0/23",
    tags: {
        hubSaaSPreview: "true",
    },
});
const exampleVirtualNetworkAppliance = new azure.paloalto.VirtualNetworkAppliance("example", {
    name: "example-appliance",
    virtualHubId: exampleVirtualHub.id,
});
const exampleNextGenerationFirewallVirtualHubPanorama = new azure.paloalto.NextGenerationFirewallVirtualHubPanorama("example", {
    name: "example",
    resourceGroupName: example.name,
    location: example.location,
    networkProfile: {
        publicIpAddressIds: [examplePublicIp.id],
        virtualHubId: exampleVirtualHub.id,
        networkVirtualApplianceId: exampleVirtualNetworkAppliance.id,
    },
    panoramaBase64Config: "VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg==",
});

    import pulumi
import pulumi_azure as azure

example = azure.core.ResourceGroup("example",
    name="example-resources",
    location="West Europe")
example_public_ip = azure.network.PublicIp("example",
    name="acceptanceTestPublicIp1",
    resource_group_name=example.name,
    location=example.location,
    allocation_method="Static",
    tags={
        "environment": "Production",
    })
example_virtual_wan = azure.network.VirtualWan("example",
    name="example-virtualwan",
    resource_group_name=example.name,
    location=example.location)
example_virtual_hub = azure.network.VirtualHub("example",
    name="example-virtualhub",
    resource_group_name=example.name,
    location=example.location,
    virtual_wan_id=example_virtual_wan.id,
    address_prefix="10.0.0.0/23",
    tags={
        "hubSaaSPreview": "true",
    })
example_virtual_network_appliance = azure.paloalto.VirtualNetworkAppliance("example",
    name="example-appliance",
    virtual_hub_id=example_virtual_hub.id)
example_next_generation_firewall_virtual_hub_panorama = azure.paloalto.NextGenerationFirewallVirtualHubPanorama("example",
    name="example",
    resource_group_name=example.name,
    location=example.location,
    network_profile={
        "public_ip_address_ids": [example_public_ip.id],
        "virtual_hub_id": example_virtual_hub.id,
        "network_virtual_appliance_id": example_virtual_network_appliance.id,
    },
    panorama_base64_config="VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg==")

    package main

import (
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/core"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/network"
	"github.com/pulumi/pulumi-azure/sdk/v6/go/azure/paloalto"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		examplePublicIp, err := network.NewPublicIp(ctx, "example", &network.PublicIpArgs{
			Name:              pulumi.String("acceptanceTestPublicIp1"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			AllocationMethod:  pulumi.String("Static"),
			Tags: pulumi.StringMap{
				"environment": pulumi.String("Production"),
			},
		})
		if err != nil {
			return err
		}
		exampleVirtualWan, err := network.NewVirtualWan(ctx, "example", &network.VirtualWanArgs{
			Name:              pulumi.String("example-virtualwan"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
		})
		if err != nil {
			return err
		}
		exampleVirtualHub, err := network.NewVirtualHub(ctx, "example", &network.VirtualHubArgs{
			Name:              pulumi.String("example-virtualhub"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			VirtualWanId:      exampleVirtualWan.ID(),
			AddressPrefix:     pulumi.String("10.0.0.0/23"),
			Tags: pulumi.StringMap{
				"hubSaaSPreview": pulumi.String("true"),
			},
		})
		if err != nil {
			return err
		}
		exampleVirtualNetworkAppliance, err := paloalto.NewVirtualNetworkAppliance(ctx, "example", &paloalto.VirtualNetworkApplianceArgs{
			Name:         pulumi.String("example-appliance"),
			VirtualHubId: exampleVirtualHub.ID(),
		})
		if err != nil {
			return err
		}
		_, err = paloalto.NewNextGenerationFirewallVirtualHubPanorama(ctx, "example", &paloalto.NextGenerationFirewallVirtualHubPanoramaArgs{
			Name:              pulumi.String("example"),
			ResourceGroupName: example.Name,
			Location:          example.Location,
			NetworkProfile: &paloalto.NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs{
				PublicIpAddressIds: pulumi.StringArray{
					examplePublicIp.ID(),
				},
				VirtualHubId:              exampleVirtualHub.ID(),
				NetworkVirtualApplianceId: exampleVirtualNetworkAppliance.ID(),
			},
			PanoramaBase64Config: pulumi.String("VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg=="),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;

return await Deployment.RunAsync(() => 
{
    var example = new Azure.Core.ResourceGroup("example", new()
    {
        Name = "example-resources",
        Location = "West Europe",
    });

    var examplePublicIp = new Azure.Network.PublicIp("example", new()
    {
        Name = "acceptanceTestPublicIp1",
        ResourceGroupName = example.Name,
        Location = example.Location,
        AllocationMethod = "Static",
        Tags = 
        {
            { "environment", "Production" },
        },
    });

    var exampleVirtualWan = new Azure.Network.VirtualWan("example", new()
    {
        Name = "example-virtualwan",
        ResourceGroupName = example.Name,
        Location = example.Location,
    });

    var exampleVirtualHub = new Azure.Network.VirtualHub("example", new()
    {
        Name = "example-virtualhub",
        ResourceGroupName = example.Name,
        Location = example.Location,
        VirtualWanId = exampleVirtualWan.Id,
        AddressPrefix = "10.0.0.0/23",
        Tags = 
        {
            { "hubSaaSPreview", "true" },
        },
    });

    var exampleVirtualNetworkAppliance = new Azure.PaloAlto.VirtualNetworkAppliance("example", new()
    {
        Name = "example-appliance",
        VirtualHubId = exampleVirtualHub.Id,
    });

    var exampleNextGenerationFirewallVirtualHubPanorama = new Azure.PaloAlto.NextGenerationFirewallVirtualHubPanorama("example", new()
    {
        Name = "example",
        ResourceGroupName = example.Name,
        Location = example.Location,
        NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
        {
            PublicIpAddressIds = new[]
            {
                examplePublicIp.Id,
            },
            VirtualHubId = exampleVirtualHub.Id,
            NetworkVirtualApplianceId = exampleVirtualNetworkAppliance.Id,
        },
        PanoramaBase64Config = "VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg==",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.ResourceGroup;
import com.pulumi.azure.core.ResourceGroupArgs;
import com.pulumi.azure.network.PublicIp;
import com.pulumi.azure.network.PublicIpArgs;
import com.pulumi.azure.network.VirtualWan;
import com.pulumi.azure.network.VirtualWanArgs;
import com.pulumi.azure.network.VirtualHub;
import com.pulumi.azure.network.VirtualHubArgs;
import com.pulumi.azure.paloalto.VirtualNetworkAppliance;
import com.pulumi.azure.paloalto.VirtualNetworkApplianceArgs;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualHubPanorama;
import com.pulumi.azure.paloalto.NextGenerationFirewallVirtualHubPanoramaArgs;
import com.pulumi.azure.paloalto.inputs.NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new ResourceGroup("example", ResourceGroupArgs.builder()
            .name("example-resources")
            .location("West Europe")
            .build());

        var examplePublicIp = new PublicIp("examplePublicIp", PublicIpArgs.builder()
            .name("acceptanceTestPublicIp1")
            .resourceGroupName(example.name())
            .location(example.location())
            .allocationMethod("Static")
            .tags(Map.of("environment", "Production"))
            .build());

        var exampleVirtualWan = new VirtualWan("exampleVirtualWan", VirtualWanArgs.builder()
            .name("example-virtualwan")
            .resourceGroupName(example.name())
            .location(example.location())
            .build());

        var exampleVirtualHub = new VirtualHub("exampleVirtualHub", VirtualHubArgs.builder()
            .name("example-virtualhub")
            .resourceGroupName(example.name())
            .location(example.location())
            .virtualWanId(exampleVirtualWan.id())
            .addressPrefix("10.0.0.0/23")
            .tags(Map.of("hubSaaSPreview", "true"))
            .build());

        var exampleVirtualNetworkAppliance = new VirtualNetworkAppliance("exampleVirtualNetworkAppliance", VirtualNetworkApplianceArgs.builder()
            .name("example-appliance")
            .virtualHubId(exampleVirtualHub.id())
            .build());

        var exampleNextGenerationFirewallVirtualHubPanorama = new NextGenerationFirewallVirtualHubPanorama("exampleNextGenerationFirewallVirtualHubPanorama", NextGenerationFirewallVirtualHubPanoramaArgs.builder()
            .name("example")
            .resourceGroupName(example.name())
            .location(example.location())
            .networkProfile(NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs.builder()
                .publicIpAddressIds(examplePublicIp.id())
                .virtualHubId(exampleVirtualHub.id())
                .networkVirtualApplianceId(exampleVirtualNetworkAppliance.id())
                .build())
            .panoramaBase64Config("VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg==")
            .build());

    }
}

    resources:
  example:
    type: azure:core:ResourceGroup
    properties:
      name: example-resources
      location: West Europe
  examplePublicIp:
    type: azure:network:PublicIp
    name: example
    properties:
      name: acceptanceTestPublicIp1
      resourceGroupName: ${example.name}
      location: ${example.location}
      allocationMethod: Static
      tags:
        environment: Production
  exampleVirtualWan:
    type: azure:network:VirtualWan
    name: example
    properties:
      name: example-virtualwan
      resourceGroupName: ${example.name}
      location: ${example.location}
  exampleVirtualHub:
    type: azure:network:VirtualHub
    name: example
    properties:
      name: example-virtualhub
      resourceGroupName: ${example.name}
      location: ${example.location}
      virtualWanId: ${exampleVirtualWan.id}
      addressPrefix: 10.0.0.0/23
      tags:
        hubSaaSPreview: 'true'
  exampleVirtualNetworkAppliance:
    type: azure:paloalto:VirtualNetworkAppliance
    name: example
    properties:
      name: example-appliance
      virtualHubId: ${exampleVirtualHub.id}
  exampleNextGenerationFirewallVirtualHubPanorama:
    type: azure:paloalto:NextGenerationFirewallVirtualHubPanorama
    name: example
    properties:
      name: example
      resourceGroupName: ${example.name}
      location: ${example.location}
      networkProfile:
        publicIpAddressIds:
          - ${examplePublicIp.id}
        virtualHubId: ${exampleVirtualHub.id}
        networkVirtualApplianceId: ${exampleVirtualNetworkAppliance.id}
      panoramaBase64Config: VGhpcyBpcyBub3QgYSByZWFsIGNvbmZpZywgcGxlYXNlIHVzZSB5b3VyIFBhbm9yYW1hIHNlcnZlciB0byBnZW5lcmF0ZSBhIHJlYWwgdmFsdWUgZm9yIHRoaXMgcHJvcGVydHkhCg==

    API Providers

    This resource uses the following Azure API Providers:

    • PaloAltoNetworks.Cloudngfw: 2023-09-01

    Create NextGenerationFirewallVirtualHubPanorama Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NextGenerationFirewallVirtualHubPanorama(name: string, args: NextGenerationFirewallVirtualHubPanoramaArgs, opts?: CustomResourceOptions);
    @overload
def NextGenerationFirewallVirtualHubPanorama(resource_name: str,
                                             args: NextGenerationFirewallVirtualHubPanoramaArgs,
                                             opts: Optional[ResourceOptions] = None)

@overload
def NextGenerationFirewallVirtualHubPanorama(resource_name: str,
                                             opts: Optional[ResourceOptions] = None,
                                             network_profile: Optional[NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs] = None,
                                             panorama_base64_config: Optional[str] = None,
                                             resource_group_name: Optional[str] = None,
                                             destination_nats: Optional[Sequence[NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs]] = None,
                                             dns_settings: Optional[NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs] = None,
                                             location: Optional[str] = None,
                                             marketplace_offer_id: Optional[str] = None,
                                             name: Optional[str] = None,
                                             plan_id: Optional[str] = None,
                                             tags: Optional[Mapping[str, str]] = None)
    func NewNextGenerationFirewallVirtualHubPanorama(ctx *Context, name string, args NextGenerationFirewallVirtualHubPanoramaArgs, opts ...ResourceOption) (*NextGenerationFirewallVirtualHubPanorama, error)
    public NextGenerationFirewallVirtualHubPanorama(string name, NextGenerationFirewallVirtualHubPanoramaArgs args, CustomResourceOptions? opts = null)
    public NextGenerationFirewallVirtualHubPanorama(String name, NextGenerationFirewallVirtualHubPanoramaArgs args)
public NextGenerationFirewallVirtualHubPanorama(String name, NextGenerationFirewallVirtualHubPanoramaArgs args, CustomResourceOptions options)

    type: azure:paloalto:NextGenerationFirewallVirtualHubPanorama
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NextGenerationFirewallVirtualHubPanoramaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NextGenerationFirewallVirtualHubPanoramaArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NextGenerationFirewallVirtualHubPanoramaArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NextGenerationFirewallVirtualHubPanoramaArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NextGenerationFirewallVirtualHubPanoramaArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var nextGenerationFirewallVirtualHubPanoramaResource = new Azure.PaloAlto.NextGenerationFirewallVirtualHubPanorama("nextGenerationFirewallVirtualHubPanoramaResource", new()
{
    NetworkProfile = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
    {
        NetworkVirtualApplianceId = "string",
        PublicIpAddressIds = new[]
        {
            "string",
        },
        VirtualHubId = "string",
        EgressNatIpAddressIds = new[]
        {
            "string",
        },
        EgressNatIpAddresses = new[]
        {
            "string",
        },
        IpOfTrustForUserDefinedRoutes = "string",
        PublicIpAddresses = new[]
        {
            "string",
        },
        TrustedAddressRanges = new[]
        {
            "string",
        },
        TrustedSubnetId = "string",
        UntrustedSubnetId = "string",
    },
    PanoramaBase64Config = "string",
    ResourceGroupName = "string",
    DestinationNats = new[]
    {
        new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs
        {
            Name = "string",
            Protocol = "string",
            BackendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfigArgs
            {
                Port = 0,
                PublicIpAddress = "string",
            },
            FrontendConfig = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfigArgs
            {
                Port = 0,
                PublicIpAddressId = "string",
            },
        },
    },
    DnsSettings = new Azure.PaloAlto.Inputs.NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs
    {
        AzureDnsServers = new[]
        {
            "string",
        },
        DnsServers = new[]
        {
            "string",
        },
        UseAzureDns = false,
    },
    Location = "string",
    MarketplaceOfferId = "string",
    Name = "string",
    PlanId = "string",
    Tags = 
    {
        { "string", "string" },
    },
});

    example, err := paloalto.NewNextGenerationFirewallVirtualHubPanorama(ctx, "nextGenerationFirewallVirtualHubPanoramaResource", &paloalto.NextGenerationFirewallVirtualHubPanoramaArgs{
	NetworkProfile: &paloalto.NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs{
		NetworkVirtualApplianceId: pulumi.String("string"),
		PublicIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		VirtualHubId: pulumi.String("string"),
		EgressNatIpAddressIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		EgressNatIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		IpOfTrustForUserDefinedRoutes: pulumi.String("string"),
		PublicIpAddresses: pulumi.StringArray{
			pulumi.String("string"),
		},
		TrustedAddressRanges: pulumi.StringArray{
			pulumi.String("string"),
		},
		TrustedSubnetId:   pulumi.String("string"),
		UntrustedSubnetId: pulumi.String("string"),
	},
	PanoramaBase64Config: pulumi.String("string"),
	ResourceGroupName:    pulumi.String("string"),
	DestinationNats: paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatArray{
		&paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs{
			Name:     pulumi.String("string"),
			Protocol: pulumi.String("string"),
			BackendConfig: &paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfigArgs{
				Port:            pulumi.Int(0),
				PublicIpAddress: pulumi.String("string"),
			},
			FrontendConfig: &paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfigArgs{
				Port:              pulumi.Int(0),
				PublicIpAddressId: pulumi.String("string"),
			},
		},
	},
	DnsSettings: &paloalto.NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs{
		AzureDnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		DnsServers: pulumi.StringArray{
			pulumi.String("string"),
		},
		UseAzureDns: pulumi.Bool(false),
	},
	Location:           pulumi.String("string"),
	MarketplaceOfferId: pulumi.String("string"),
	Name:               pulumi.String("string"),
	PlanId:             pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})

    var nextGenerationFirewallVirtualHubPanoramaResource = new NextGenerationFirewallVirtualHubPanorama("nextGenerationFirewallVirtualHubPanoramaResource", NextGenerationFirewallVirtualHubPanoramaArgs.builder()
    .networkProfile(NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs.builder()
        .networkVirtualApplianceId("string")
        .publicIpAddressIds("string")
        .virtualHubId("string")
        .egressNatIpAddressIds("string")
        .egressNatIpAddresses("string")
        .ipOfTrustForUserDefinedRoutes("string")
        .publicIpAddresses("string")
        .trustedAddressRanges("string")
        .trustedSubnetId("string")
        .untrustedSubnetId("string")
        .build())
    .panoramaBase64Config("string")
    .resourceGroupName("string")
    .destinationNats(NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs.builder()
        .name("string")
        .protocol("string")
        .backendConfig(NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfigArgs.builder()
            .port(0)
            .publicIpAddress("string")
            .build())
        .frontendConfig(NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfigArgs.builder()
            .port(0)
            .publicIpAddressId("string")
            .build())
        .build())
    .dnsSettings(NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs.builder()
        .azureDnsServers("string")
        .dnsServers("string")
        .useAzureDns(false)
        .build())
    .location("string")
    .marketplaceOfferId("string")
    .name("string")
    .planId("string")
    .tags(Map.of("string", "string"))
    .build());

    next_generation_firewall_virtual_hub_panorama_resource = azure.paloalto.NextGenerationFirewallVirtualHubPanorama("nextGenerationFirewallVirtualHubPanoramaResource",
    network_profile={
        "network_virtual_appliance_id": "string",
        "public_ip_address_ids": ["string"],
        "virtual_hub_id": "string",
        "egress_nat_ip_address_ids": ["string"],
        "egress_nat_ip_addresses": ["string"],
        "ip_of_trust_for_user_defined_routes": "string",
        "public_ip_addresses": ["string"],
        "trusted_address_ranges": ["string"],
        "trusted_subnet_id": "string",
        "untrusted_subnet_id": "string",
    },
    panorama_base64_config="string",
    resource_group_name="string",
    destination_nats=[{
        "name": "string",
        "protocol": "string",
        "backend_config": {
            "port": 0,
            "public_ip_address": "string",
        },
        "frontend_config": {
            "port": 0,
            "public_ip_address_id": "string",
        },
    }],
    dns_settings={
        "azure_dns_servers": ["string"],
        "dns_servers": ["string"],
        "use_azure_dns": False,
    },
    location="string",
    marketplace_offer_id="string",
    name="string",
    plan_id="string",
    tags={
        "string": "string",
    })

    const nextGenerationFirewallVirtualHubPanoramaResource = new azure.paloalto.NextGenerationFirewallVirtualHubPanorama("nextGenerationFirewallVirtualHubPanoramaResource", {
    networkProfile: {
        networkVirtualApplianceId: "string",
        publicIpAddressIds: ["string"],
        virtualHubId: "string",
        egressNatIpAddressIds: ["string"],
        egressNatIpAddresses: ["string"],
        ipOfTrustForUserDefinedRoutes: "string",
        publicIpAddresses: ["string"],
        trustedAddressRanges: ["string"],
        trustedSubnetId: "string",
        untrustedSubnetId: "string",
    },
    panoramaBase64Config: "string",
    resourceGroupName: "string",
    destinationNats: [{
        name: "string",
        protocol: "string",
        backendConfig: {
            port: 0,
            publicIpAddress: "string",
        },
        frontendConfig: {
            port: 0,
            publicIpAddressId: "string",
        },
    }],
    dnsSettings: {
        azureDnsServers: ["string"],
        dnsServers: ["string"],
        useAzureDns: false,
    },
    location: "string",
    marketplaceOfferId: "string",
    name: "string",
    planId: "string",
    tags: {
        string: "string",
    },
});

    type: azure:paloalto:NextGenerationFirewallVirtualHubPanorama
properties:
    destinationNats:
        - backendConfig:
            port: 0
            publicIpAddress: string
          frontendConfig:
            port: 0
            publicIpAddressId: string
          name: string
          protocol: string
    dnsSettings:
        azureDnsServers:
            - string
        dnsServers:
            - string
        useAzureDns: false
    location: string
    marketplaceOfferId: string
    name: string
    networkProfile:
        egressNatIpAddressIds:
            - string
        egressNatIpAddresses:
            - string
        ipOfTrustForUserDefinedRoutes: string
        networkVirtualApplianceId: string
        publicIpAddressIds:
            - string
        publicIpAddresses:
            - string
        trustedAddressRanges:
            - string
        trustedSubnetId: string
        untrustedSubnetId: string
        virtualHubId: string
    panoramaBase64Config: string
    planId: string
    resourceGroupName: string
    tags:
        string: string

    NextGenerationFirewallVirtualHubPanorama Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The NextGenerationFirewallVirtualHubPanorama resource accepts the following input properties:

    NetworkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    PanoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    ResourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    DestinationNats List<NextGenerationFirewallVirtualHubPanoramaDestinationNat>
    One or more destination_nat blocks as defined below.
    DnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    Location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    MarketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PlanId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    NetworkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
    A network_profile block as defined below.
    PanoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    ResourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    DestinationNats []NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs
    One or more destination_nat blocks as defined below.
    DnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs
    A dns_settings block as defined below.
    Location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    MarketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PlanId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    Tags map[string]string
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    networkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    panoramaBase64Config String
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    resourceGroupName String
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    destinationNats List<NextGenerationFirewallVirtualHubPanoramaDestinationNat>
    One or more destination_nat blocks as defined below.
    dnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    location String
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId String
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    planId String

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    tags Map<String,String>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    networkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    panoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    resourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    destinationNats NextGenerationFirewallVirtualHubPanoramaDestinationNat[]
    One or more destination_nat blocks as defined below.
    dnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    planId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    tags {[key: string]: string}
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    network_profile NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
    A network_profile block as defined below.
    panorama_base64_config str
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    resource_group_name str
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    destination_nats Sequence[NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs]
    One or more destination_nat blocks as defined below.
    dns_settings NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs
    A dns_settings block as defined below.
    location str
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplace_offer_id str
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name str
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    plan_id str

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    tags Mapping[str, str]
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    networkProfile Property Map
    A network_profile block as defined below.
    panoramaBase64Config String
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    resourceGroupName String
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    destinationNats List<Property Map>
    One or more destination_nat blocks as defined below.
    dnsSettings Property Map
    A dns_settings block as defined below.
    location String
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId String
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    planId String

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    tags Map<String>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NextGenerationFirewallVirtualHubPanorama resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Panoramas List<NextGenerationFirewallVirtualHubPanoramaPanorama>
    Id string
    The provider-assigned unique ID for this managed resource.
    Panoramas []NextGenerationFirewallVirtualHubPanoramaPanorama
    id String
    The provider-assigned unique ID for this managed resource.
    panoramas List<NextGenerationFirewallVirtualHubPanoramaPanorama>
    id string
    The provider-assigned unique ID for this managed resource.
    panoramas NextGenerationFirewallVirtualHubPanoramaPanorama[]
    id str
    The provider-assigned unique ID for this managed resource.
    panoramas Sequence[NextGenerationFirewallVirtualHubPanoramaPanorama]
    id String
    The provider-assigned unique ID for this managed resource.
    panoramas List<Property Map>

    Look up Existing NextGenerationFirewallVirtualHubPanorama Resource

    Get an existing NextGenerationFirewallVirtualHubPanorama resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NextGenerationFirewallVirtualHubPanoramaState, opts?: CustomResourceOptions): NextGenerationFirewallVirtualHubPanorama
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        destination_nats: Optional[Sequence[NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs]] = None,
        dns_settings: Optional[NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs] = None,
        location: Optional[str] = None,
        marketplace_offer_id: Optional[str] = None,
        name: Optional[str] = None,
        network_profile: Optional[NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs] = None,
        panorama_base64_config: Optional[str] = None,
        panoramas: Optional[Sequence[NextGenerationFirewallVirtualHubPanoramaPanoramaArgs]] = None,
        plan_id: Optional[str] = None,
        resource_group_name: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None) -> NextGenerationFirewallVirtualHubPanorama
    func GetNextGenerationFirewallVirtualHubPanorama(ctx *Context, name string, id IDInput, state *NextGenerationFirewallVirtualHubPanoramaState, opts ...ResourceOption) (*NextGenerationFirewallVirtualHubPanorama, error)
    public static NextGenerationFirewallVirtualHubPanorama Get(string name, Input<string> id, NextGenerationFirewallVirtualHubPanoramaState? state, CustomResourceOptions? opts = null)
    public static NextGenerationFirewallVirtualHubPanorama get(String name, Output<String> id, NextGenerationFirewallVirtualHubPanoramaState state, CustomResourceOptions options)
    resources:  _:    type: azure:paloalto:NextGenerationFirewallVirtualHubPanorama    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    DestinationNats List<NextGenerationFirewallVirtualHubPanoramaDestinationNat>
    One or more destination_nat blocks as defined below.
    DnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    Location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    MarketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    NetworkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    PanoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    Panoramas List<NextGenerationFirewallVirtualHubPanoramaPanorama>
    PlanId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    ResourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    Tags Dictionary<string, string>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    DestinationNats []NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs
    One or more destination_nat blocks as defined below.
    DnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs
    A dns_settings block as defined below.
    Location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    MarketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    NetworkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
    A network_profile block as defined below.
    PanoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    Panoramas []NextGenerationFirewallVirtualHubPanoramaPanoramaArgs
    PlanId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    ResourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    Tags map[string]string
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    destinationNats List<NextGenerationFirewallVirtualHubPanoramaDestinationNat>
    One or more destination_nat blocks as defined below.
    dnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    location String
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId String
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    networkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    panoramaBase64Config String
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    panoramas List<NextGenerationFirewallVirtualHubPanoramaPanorama>
    planId String

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    resourceGroupName String
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    tags Map<String,String>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    destinationNats NextGenerationFirewallVirtualHubPanoramaDestinationNat[]
    One or more destination_nat blocks as defined below.
    dnsSettings NextGenerationFirewallVirtualHubPanoramaDnsSettings
    A dns_settings block as defined below.
    location string
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId string
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    networkProfile NextGenerationFirewallVirtualHubPanoramaNetworkProfile
    A network_profile block as defined below.
    panoramaBase64Config string
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    panoramas NextGenerationFirewallVirtualHubPanoramaPanorama[]
    planId string

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    resourceGroupName string
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    tags {[key: string]: string}
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    destination_nats Sequence[NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs]
    One or more destination_nat blocks as defined below.
    dns_settings NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs
    A dns_settings block as defined below.
    location str
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplace_offer_id str
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name str
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    network_profile NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs
    A network_profile block as defined below.
    panorama_base64_config str
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    panoramas Sequence[NextGenerationFirewallVirtualHubPanoramaPanoramaArgs]
    plan_id str

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    resource_group_name str
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    tags Mapping[str, str]
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.
    destinationNats List<Property Map>
    One or more destination_nat blocks as defined below.
    dnsSettings Property Map
    A dns_settings block as defined below.
    location String
    The Azure Region where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    marketplaceOfferId String
    The marketplace offer ID. Defaults to pan_swfw_cloud_ngfw. Changing this forces a new resource to be created.
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    networkProfile Property Map
    A network_profile block as defined below.
    panoramaBase64Config String
    The Base64 Encoded configuration value for connecting to the Panorama Configuration server.
    panoramas List<Property Map>
    planId String

    The billing plan ID as published by Liftr.PAN. Defaults to panw-cloud-ngfw-payg.

    Note: The former plan_id panw-cloud-ngfw-payg is defined as stop sell, but has been set as the default to not break any existing resources that were originally provisioned with it. Users need to explicitly set plan_id to panw-cngfw-payg when creating new resources.

    resourceGroupName String
    The name of the Resource Group where the Palo Alto Next Generation Firewall VHub Panorama should exist. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    tags Map<String>
    A mapping of tags which should be assigned to the Palo Alto Next Generation Firewall VHub Panorama.

    Supporting Types

    NextGenerationFirewallVirtualHubPanoramaDestinationNat, NextGenerationFirewallVirtualHubPanoramaDestinationNatArgs

    Name string
    The name which should be used for this NAT.
    Protocol string
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    BackendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig
    A backend_config block as defined above.
    FrontendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig
    A frontend_config block as defined below.
    Name string
    The name which should be used for this NAT.
    Protocol string
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    BackendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig
    A backend_config block as defined above.
    FrontendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig
    A frontend_config block as defined below.
    name String
    The name which should be used for this NAT.
    protocol String
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    backendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig
    A backend_config block as defined above.
    frontendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig
    A frontend_config block as defined below.
    name string
    The name which should be used for this NAT.
    protocol string
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    backendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig
    A backend_config block as defined above.
    frontendConfig NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig
    A frontend_config block as defined below.
    name str
    The name which should be used for this NAT.
    protocol str
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    backend_config NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig
    A backend_config block as defined above.
    frontend_config NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig
    A frontend_config block as defined below.
    name String
    The name which should be used for this NAT.
    protocol String
    The protocol used for this Destination NAT. Possible values include TCP and UDP.
    backendConfig Property Map
    A backend_config block as defined above.
    frontendConfig Property Map
    A frontend_config block as defined below.

    NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig, NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfigArgs

    Port int
    The port number to send traffic to.
    PublicIpAddress string
    The Public IP Address to send the traffic to.
    Port int
    The port number to send traffic to.
    PublicIpAddress string
    The Public IP Address to send the traffic to.
    port Integer
    The port number to send traffic to.
    publicIpAddress String
    The Public IP Address to send the traffic to.
    port number
    The port number to send traffic to.
    publicIpAddress string
    The Public IP Address to send the traffic to.
    port int
    The port number to send traffic to.
    public_ip_address str
    The Public IP Address to send the traffic to.
    port Number
    The port number to send traffic to.
    publicIpAddress String
    The Public IP Address to send the traffic to.

    NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig, NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfigArgs

    Port int
    The port on which traffic will be receiveed.
    PublicIpAddressId string
    The ID of the Public IP Address resource the traffic will be received on.
    Port int
    The port on which traffic will be receiveed.
    PublicIpAddressId string
    The ID of the Public IP Address resource the traffic will be received on.
    port Integer
    The port on which traffic will be receiveed.
    publicIpAddressId String
    The ID of the Public IP Address resource the traffic will be received on.
    port number
    The port on which traffic will be receiveed.
    publicIpAddressId string
    The ID of the Public IP Address resource the traffic will be received on.
    port int
    The port on which traffic will be receiveed.
    public_ip_address_id str
    The ID of the Public IP Address resource the traffic will be received on.
    port Number
    The port on which traffic will be receiveed.
    publicIpAddressId String
    The ID of the Public IP Address resource the traffic will be received on.

    NextGenerationFirewallVirtualHubPanoramaDnsSettings, NextGenerationFirewallVirtualHubPanoramaDnsSettingsArgs

    AzureDnsServers List<string>
    DnsServers List<string>
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    UseAzureDns bool
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.
    AzureDnsServers []string
    DnsServers []string
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    UseAzureDns bool
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.
    azureDnsServers List<String>
    dnsServers List<String>
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    useAzureDns Boolean
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.
    azureDnsServers string[]
    dnsServers string[]
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    useAzureDns boolean
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.
    azure_dns_servers Sequence[str]
    dns_servers Sequence[str]
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    use_azure_dns bool
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.
    azureDnsServers List<String>
    dnsServers List<String>
    Specifies a list of DNS servers to proxy. Conflicts with dns_settings[0].use_azure_dns.
    useAzureDns Boolean
    Should Azure DNS servers be used? Conflicts with dns_settings[0].dns_servers. Defaults to false.

    NextGenerationFirewallVirtualHubPanoramaNetworkProfile, NextGenerationFirewallVirtualHubPanoramaNetworkProfileArgs

    NetworkVirtualApplianceId string
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PublicIpAddressIds List<string>
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    VirtualHubId string
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    EgressNatIpAddressIds List<string>
    Specifies a list of Public IP IDs to use for Egress NAT.
    EgressNatIpAddresses List<string>
    IpOfTrustForUserDefinedRoutes string
    PublicIpAddresses List<string>
    TrustedAddressRanges List<string>
    Specifies a list of trusted ranges to use for the Network.
    TrustedSubnetId string
    UntrustedSubnetId string
    NetworkVirtualApplianceId string
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PublicIpAddressIds []string
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    VirtualHubId string
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    EgressNatIpAddressIds []string
    Specifies a list of Public IP IDs to use for Egress NAT.
    EgressNatIpAddresses []string
    IpOfTrustForUserDefinedRoutes string
    PublicIpAddresses []string
    TrustedAddressRanges []string
    Specifies a list of trusted ranges to use for the Network.
    TrustedSubnetId string
    UntrustedSubnetId string
    networkVirtualApplianceId String
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    publicIpAddressIds List<String>
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    virtualHubId String
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    egressNatIpAddressIds List<String>
    Specifies a list of Public IP IDs to use for Egress NAT.
    egressNatIpAddresses List<String>
    ipOfTrustForUserDefinedRoutes String
    publicIpAddresses List<String>
    trustedAddressRanges List<String>
    Specifies a list of trusted ranges to use for the Network.
    trustedSubnetId String
    untrustedSubnetId String
    networkVirtualApplianceId string
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    publicIpAddressIds string[]
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    virtualHubId string
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    egressNatIpAddressIds string[]
    Specifies a list of Public IP IDs to use for Egress NAT.
    egressNatIpAddresses string[]
    ipOfTrustForUserDefinedRoutes string
    publicIpAddresses string[]
    trustedAddressRanges string[]
    Specifies a list of trusted ranges to use for the Network.
    trustedSubnetId string
    untrustedSubnetId string
    network_virtual_appliance_id str
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    public_ip_address_ids Sequence[str]
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    virtual_hub_id str
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    egress_nat_ip_address_ids Sequence[str]
    Specifies a list of Public IP IDs to use for Egress NAT.
    egress_nat_ip_addresses Sequence[str]
    ip_of_trust_for_user_defined_routes str
    public_ip_addresses Sequence[str]
    trusted_address_ranges Sequence[str]
    Specifies a list of trusted ranges to use for the Network.
    trusted_subnet_id str
    untrusted_subnet_id str
    networkVirtualApplianceId String
    The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    publicIpAddressIds List<String>
    Specifies a list of Public IP IDs to use for this Next Generation Firewall.
    virtualHubId String
    The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
    egressNatIpAddressIds List<String>
    Specifies a list of Public IP IDs to use for Egress NAT.
    egressNatIpAddresses List<String>
    ipOfTrustForUserDefinedRoutes String
    publicIpAddresses List<String>
    trustedAddressRanges List<String>
    Specifies a list of trusted ranges to use for the Network.
    trustedSubnetId String
    untrustedSubnetId String

    NextGenerationFirewallVirtualHubPanoramaPanorama, NextGenerationFirewallVirtualHubPanoramaPanoramaArgs

    DeviceGroupName string
    HostName string
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PanoramaServer1 string
    PanoramaServer2 string
    TemplateName string
    VirtualMachineSshKey string
    DeviceGroupName string
    HostName string
    Name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    PanoramaServer1 string
    PanoramaServer2 string
    TemplateName string
    VirtualMachineSshKey string
    deviceGroupName String
    hostName String
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    panoramaServer1 String
    panoramaServer2 String
    templateName String
    virtualMachineSshKey String
    deviceGroupName string
    hostName string
    name string
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    panoramaServer1 string
    panoramaServer2 string
    templateName string
    virtualMachineSshKey string
    device_group_name str
    host_name str
    name str
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    panorama_server1 str
    panorama_server2 str
    template_name str
    virtual_machine_ssh_key str
    deviceGroupName String
    hostName String
    name String
    The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
    panoramaServer1 String
    panoramaServer2 String
    templateName String
    virtualMachineSshKey String

    Import

    Palo Alto Next Generation Firewall VHub Panoramas can be imported using the resource id, e.g.

    $ pulumi import azure:paloalto/nextGenerationFirewallVirtualHubPanorama:NextGenerationFirewallVirtualHubPanorama example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/PaloAltoNetworks.Cloudngfw/firewalls/myVhubPanoramaFW

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Classic pulumi/pulumi-azure
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the azurerm Terraform Provider.
    azure logo

    We recommend using Azure Native.

    Azure v6.23.0 published on Thursday, May 22, 2025 by Pulumi
    pulumi/pulumi-azure