Azure

CloudGuard WAF can be deployed as either a single virtual machine or a Scale-Set in Azure. It acts as a reverse proxy where before / after you can deploy Azure Load Balancers.

List of troubleshooting guides under this section:

"Unable to find a tag containing the vault's name in the VMSS" Error

How To: Configure Key Vault for a Single Gateway