PAN-OS

Sign in Subscribe

PAN-OS

A collection of 8 posts

Migrate a HA Pair of PAN-OS firewalls into Panorama

Migrate a HA Pair of PAN-OS firewalls into Panorama

When I deploy Panorama first time into the network, I always aim to have the least amount of local configuration on the firewalls as possible and allow Panorama to manage 99% of the configuration. However, in my lab, the firewalls do have some Security Policies and IPSec configuration which I

Upgrading Panorama PAN-OS Software

Upgrading Panorama PAN-OS Software

Time to upgrade Panorama to a newer PAN-OS version! My EVE-NG lab Panorama has an internet connection that allows me to download software and content updates. And since I'm running in Panorama mode with an integrated log collector, I don't need to upgrade the log collector

Panorama Baseline Configuration

Panorama Baseline Configuration

Now that I have successfully deployed a Panorama KVM image in EVE-NG, I can now boot up the two Panorama virtual appliances and configure IP connectivity through the console so that each Panorama can be managed via the WebUI and SSH. The aim of this lab task is to have

Deploying a Panorama KVM image to use with EVE-NG

Deploying a Panorama KVM image to use with EVE-NG

1. SSH to the EVE-NG server, create a new folder for the KVM image, mkdir /opt/unetlab/addons/qemu/panorama-10.1.3 2. Copy the Panorama .qcow2 image to the /opt/unetlab/addons/qemu/panorama-10.1.3 folder using FileZilla or WinSCP as an example. The folder must be named

IPSec VPN between a Palo Alto Networks Firewall and a Cisco Router

IPSec VPN between a Palo Alto Networks Firewall and a Cisco Router

In my EVE-NG lab, I've configured static IPSec Site-to-Site VPN between a Palo Alto Networks VM-Series firewall running PAN-OS 9.1.12 and a Cisco IOSv router running the VIOS-ADVENTERPRISEK9-M 15.9 image. The PAN firewall has connectivity through the lab internet backbone to the Cisco router. Both

How Generate Self-Signed Certificates on a PAN-OS Firewall

How Generate Self-Signed Certificates on a PAN-OS Firewall

So you don't have a Windows Server with Active Directory and Certificate Services ready to go, but wait you need to test GlobalProtect client certificate authentication now! What's the answer? Easy, generate a self-signed root certificate on the Palo Alto Networks firewall and create a client

How To Configure A Certificate For Secure PAN-OS Web-GUI Access

How To Configure A Certificate For Secure PAN-OS Web-GUI Access

When using the WebUI to access a Palo Alto Networks firewall, you can use a certificate for all web-based management sessions, which will in turn get rid of those really annoying " Your connection is not private" warning pages. If you are familiar with my YouTube channel [https://www.

How to automatically bulk import address objects into Palo Alto Firewall.

How to automatically bulk import address objects into Palo Alto Firewall.

I couldn't possibly count the number of times I've needed to import a huge long list of objects into a firewalls configuration for some sort of IT project. These days the thought of manually adding each object one by one using Web-UI button clicks fills me