The link below will deploy a VNET and multiple Subnets for a Palo Alto
The link below will deploy 1 (or more) Palo Alto firewalls in an Avaliblity set with the following interfaces:
Management Untrust Trust Dev DMZ HA
The link below will deploy UDRs for the Palo Alto