In this video I'll show you step by step how to install Palo Alto firewall on VirtualBox. Screenshots: www.certvideos.com/how-to-install-palo-alto-firewall-o. In this video I'll show you step by step how to install Palo Alto firewall on VirtualBox. Screenshots: www.certvideos.com/how-to-install-palo-alto-firewall-o. There’s no question about the business value of the cloud – the question is how to adapt your security to work for the cloud. Palo Alto Networks ® allows you to deploy consistent, automated security for your apps and data on AWS taking either an inline approach with the VM-Series or API-based approach with Evident. 2) Go to the Assets tab and click VM-Series Auth-Codes. 3) Click Add VM-Series Auth-Code 4) In the pop-up window, enter the VM-series auth code that you purchased from Palo Alto Networks and click the button Agree and Submit (Note that for Software Evaluation, you will have received an email containing the evaluation Auth-Code.

What you need

• A computer with VMware or VirtualBox on it.

Purpose

To get a Palo Alto virtual firewall workingand see how to configure its basic security settings.

Downloading the OVA File

Go to the page linked below, and log inwith the credentials given in class.

Find the 'CNIT 140' section and download the Palo Alto Firewall file.

You end up with a 1.7 GB file named PA-VM-ESX-7.1.0.ova.

Importing the OVA File into VMware Fusion

In VMware Fusion, click File, Import.

Browse to the PA-VM-ESX-7.1.0.ova file and double-click it.

In the 'Choose an Existing Virtual Machine' window, clickthe Continue button.

Choose a location to save your Palo Alto VM and clickthe Save button.

Wait till the import completes. Then click theFinish button.

The Palo Alto starts up, saying 'Welcome to the PanOS Bootloader'.

Logging in to the Palo Alto Directly

This may be the most secure method, butnot a very convenient one.

In the VM window, at the 'vm login' prompt, log in with these credentials:

Username: admin
Password: admin

You're in, as shown below:

Using Help

Type ?

A list of available commands appears,as shown below.

Type show? to see a list of parametersfor the 'show' command.

Using the Web Interface

Open a Browser and go to

https://192.168.1.1/

Accept the certificate, and log in as admin/admin.

In the Welcome box, click Close.

You now have the PAN GUI,as shown below.

Changing the Administrator Password

At the top right, click Device.

Near the top of the left pane, clickAdministrators.

In the center pane, click the blue admin.

A box appears, allowing you to change thepassword,as shown below.

Configure the Management Interface

Select Device > Setup > Management and then edit the Management Interface Settings.

Enter the IP Address, Netmask, and Default Gateway.(Leave them alone).

To prevent unauthorized access to the management interface, it is a best practice to Add the Permitted IP Addresses from which an administrator can access the MGT interface.

Set the Speed to auto-negotiate.

Select which management services to allow on the interface.

Make sure Telnet and HTTP are not selected because these services use plaintext and are not as secure as the other services and could compromise administrator credentials.

Click OK.

Commit Your Changes

At the top right of the Web interface,click Commit.

A Commit box pops up. Click Commit.

The device may take up to 90 seconds to save your changes.

request shutdown system

To add another NIC

Add it through the GUI, then edit the VMX file and change thethe virtualDev line to this:

ethernet2.virtualDev = 'vmxnet3'

References

Initial Configuration

PAN 1: PAN-OS® Command Line Interface (CLI) Reference Guide
PAN 2: PAN-OS� 7.0 CLI Quick Start
PAN 3: CLI Cheat Sheets
PAN 4: Use the Command Line Interface (CLI)
PAN 5: Importing an OVA file into VMware Fusion

Modified 11-19-16 by Sam Bowne
Symptom
Steps to activate a license for a Palo Alto Networks VM-Series firewall installed on an ESXi server that does not have direct internet access.

Resolution

1. Access the web interface of the firewall. Navigate to Device > Licenses and click Activate Feature using Auth Code

Palo Alto Virtual Firewall

2. Click Download Authorization File to download an authorizationfile.txt file on the client machine.

3. Copy the above file to a computer that has access to the internet and log into the support portal. Click My VM-Series Auth-Codes and select the applicable auth-code from the list.
4. Then click Register VM

5. On the Register VM popup window select the authorization file. This will complete the registration process and the serial number of the VM-Series firewall will be attached to the record on the support site.

6. Navigate to the My Devices tab and search for the VM-Series device just registered and click the PA-VM link. This will download the VM-Series license key for the client machine.

7. Copy the license key to the machine that can access the web interface of the VM-Series firewall and navigate to Device > License tab.
8. Click Manually Upload License and enter the license key. The license will be activated on the device and the device will reboot.

Palo Alto Vm Download Ova

9. Log into the device and confirm that the dashboard displays a valid serial number. If it is unknown it means the device was not licensed.
10. On the Device > Licenses tab, verify that the PA-VM license was added to the device.

Palo Alto Vm Download Vmware Workstation

Attachments