In a recent client engagement I helped a 3rd party install a Palo Alto into an Azure VDC I’d built. I was there for Azure support. We had issues initially with the Palo Alto not being able to route traffic into Azure. It turns out that the Palo Alto documentation misses some vital steps. If you follow the blog written by Jack Stromberg you’ll see that you need add a route to the default gateway of the subnet the Palo Alto is in. The key section is titled Create a new Virtual Router and Static Route to your Azure Subnets”

Follow this link to see Jack’s full article: