Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)

The VM-Series firewall deployment on Microsoft Azure Stack has specific limitations compared to its deployment in the public Azure cloud. According to the official Palo Alto Networks documentation, several Azure-native services and automation features are not supported for the VM-Series on Azure Stack. These include Azure Application Insights for performance monitoring, Azure Security Center for integrated security management, and bootstrapping for automated initial configuration. These features rely on infrastructure and service endpoints that are present in public Azure but not necessarily in an on-premises Azure Stack environment.

B. Resource Group: This is incorrect. Deploying the VM-Series firewall within a Resource Group is a fundamental and supported aspect of managing resources on Azure Stack.
E. ARM Template: This is incorrect. Using Azure Resource Manager (ARM) templates is a primary and supported method for deploying the VM-Series firewall on Azure Stack.

1. Palo Alto Networks. (2023). "VM-Series Firewall on Azure Stack Features". VM-Series Deployment Guide. Palo Alto Networks Documentation. Retrieved from https://docs.paloaltonetworks.com/vm-series/11-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure/vm-series-firewall-on-azure-stack/vm-series-firewall-on-azure-stack-features.

Reference Details: The "Unsupported Features" table in this section explicitly lists "Bootstrapping

" "Azure Application Insights

" and "Azure Security Center" as not supported for VM-Series on Azure Stack. The "Supported Features" section confirms that deployment using ARM templates and into a Resource Group is supported.