Hard coded IP ranges

[azjon]

IP ranges are hardcoded into the two-tier-sample template, meaning the template usually requires reworking for each environment, as opposed to just working with the parameters file.

It would be useful if we could deploy "VM-Series Next-Generation Firewall from Palo Alto Networks" from Azure marketplace (azure portal) into an availability set or availability zone; unfortunately the deployment wizard doesn't include the option - so we have to use ARM or delete the VM and recreate it from disk in an availability set.