Azure VM Agent and Extension Logs
This is a collection of links and file locations used to troubleshoot various Azure VM extensions or agents. Mainly done so I don't have to google it everytime
troubleshooting¶
Troubleshooting failed IP group that causes an AzureFirewall to fail
This is the documentation of a problem I encountered at work today, where updating an IP Group failed and caused the AzureFirewall policy associated with the IP Group to go into a 'Failed' state as well.
In my recent case, this happened in a parent/child policy setup. Traffic was still forwarded correctly by the AzureFirewall.
Update Oct. 2023
This procedure also worked in cases where the parent policy (and one AzFW) failed without any ip group failures.
General procedure:
- Disconnect child from failed parent policy
PUToperation to get the parent policy in 'Succeeded' state- (optional, if needed)
PUToperation to get the AzFW in 'Succeeded' state - If everyhting is in 'Succeeded' state, attach child to parent policy again