What you need

• Palo Alto Vmware Download
• Palo Alto Ova File Download

Palo Alto Vmware Download

• A computer with VMware or VirtualBox on it.

Download the Panorama OVA files Applicable to the following hypervisors: ESXi KVM Citrix SDX Nutanix Hyper-V OpenStack For an updated list, p. I created a new OVA that is now at 1.1.6. All Ubuntu updates have been applied as well. Permissions for the /datastore and /PALogs should work for all cases now. Panorama enables you to centrally manage all aspects of your Palo Alto Networks next-generation firewalls with device groups, templates and role-based administration. Device groups: you can use device groups to deploy rules to enforce consistent security across all locations. These global (pre- and post-) firewall rules can be augmented.

Purpose

To get a Palo Alto virtual firewall workingand see how to configure its basic security settings.

Downloading the OVA File

Go to the page linked below, and log inwith the credentials given in class.

Find the 'CNIT 140' section and download the Palo Alto Firewall file.

You end up with a 1.7 GB file named PA-VM-ESX-7.1.0.ova.

Importing the OVA File into VMware Fusion

Palo Alto Ova File Download

In VMware Fusion, click File, Import.

Browse to the PA-VM-ESX-7.1.0.ova file and double-click it.

In the 'Choose an Existing Virtual Machine' window, clickthe Continue button.

Choose a location to save your Palo Alto VM and clickthe Save button.

Wait till the import completes. Then click theFinish button.

The Palo Alto starts up, saying 'Welcome to the PanOS Bootloader'.

Logging in to the Palo Alto Directly

This may be the most secure method, butnot a very convenient one.

In the VM window, at the 'vm login' prompt, log in with these credentials:

Username: admin
Password: admin

You're in, as shown below:

Using Help

Type ?

A list of available commands appears,as shown below.

Type show? to see a list of parametersfor the 'show' command.

Using the Web Interface

Open a Browser and go to

https://192.168.1.1/

Accept the certificate, and log in as admin/admin.

In the Welcome box, click Close.

You now have the PAN GUI,as shown below.

Changing the Administrator Password

At the top right, click Device.

Near the top of the left pane, clickAdministrators.

In the center pane, click the blue admin.

A box appears, allowing you to change thepassword,as shown below.

Configure the Management Interface

Select Device > Setup > Management and then edit the Management Interface Settings.

Enter the IP Address, Netmask, and Default Gateway.(Leave them alone).

To prevent unauthorized access to the management interface, it is a best practice to Add the Permitted IP Addresses from which an administrator can access the MGT interface.

Set the Speed to auto-negotiate.

Select which management services to allow on the interface.

Make sure Telnet and HTTP are not selected because these services use plaintext and are not as secure as the other services and could compromise administrator credentials.

Click OK.

Commit Your Changes

At the top right of the Web interface,click Commit.

A Commit box pops up. Click Commit.

The device may take up to 90 seconds to save your changes.

request shutdown system

To add another NIC

Add it through the GUI, then edit the VMX file and change thethe virtualDev line to this:

ethernet2.virtualDev = 'vmxnet3'

References

Initial Configuration

PAN 1: PAN-OS® Command Line Interface (CLI) Reference Guide
PAN 2: PAN-OS� 7.0 CLI Quick Start
PAN 3: CLI Cheat Sheets
PAN 4: Use the Command Line Interface (CLI)
PAN 5: Importing an OVA file into VMware Fusion

Modified 11-19-16 by Sam Bowne