Share via

Azure Watchguard

Alan Richardson 0 Reputation points
2024-12-31T12:16:59.9966667+00:00

Hi I'm about to deploy a watchguard into Azure.

The servers have the own public IP address with an NSG and is quite heavily locked down.

I'm aware that Microsoft Azure does not support deployment of a managed application to a resource group with existing resources. You must create a new resource group or use an empty resource group.

But creating this creates a different VNET with different IP address. Is it best to move all previous resource group devices into the newly created one by the watchguard or use peerings?

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,584 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. KapilAnanth-MSFT 48,176 Reputation points Microsoft Employee
    2025-01-02T05:41:02.29+00:00

    @Alan Richardson ,

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    I understand that you are planning to deploy a 3rd party tool from Azure Market place.

    Please note that SMEs here may have expertise over Azure Products, but that may not be the same case for Azure market place resources.

    With that said,

    • Are you sure the RG created by this 3rd party service allows you to move or deploy resources other than those that are created/managed by the service itself?
    • i.e., is it partially managed or completely managed?
    • If the resource allows VNET Peering, I would suggest you consider VNET Peering instead of deploying Azure resources into this partially managed/completely managed VNET
      • This makes sense as if you want to remove the 3rd party service, you could simply remove the VNET Peering and keep the Azure resources intact (non-destructive)
      • However, if the Azure resources are in the same managed VNET, there may be some restrictions imposed by the 3rd party service
    • Please check with the 3rd party's documentations/recommendations on deploying other resources in the same VNET / RG.

    Hope this helps.

    Cheers,

    Kapil

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.