setup the interfaces so that interface configurations can be pushed via Panorama templatesīasic setup of 3 interfaces as layer 3 and port 7 and 8 for HA1/2:.Below you will find my staging scripts for the local device and Panorama.Įxample deployment “script” for PA firewallįor easier deployment, I build a small excel file that will build all the commands to The Palo Alto CLI is very capable and I was pleasantly surprised about the awesome readability of the commands. I basically wanted to have a copy/paste deployment procedure to save time and drive standardization. Hence I referred to the CLI and looked up all commands to wipe and stage a new device for our environment. Just to hit “commit” and get another error thrown at you. Now you must click through the WebUI and delete the standard configuration in the correct order to avoid dependency errors. And after all, you want to get rid of any configuration that you may not use. Now when you want to add it to Panorama this will cause some problems because it interferes with the config you want to push from Panorama. The reason is that PANs come with a standard configuration which has a standard security policy, virtual-wires and security zones. There is just something about them that I like.Īs much as I love the UI it is somewhat annoying to integrate a new Palo Alto in Panorama.

I am not gonna lie, I am beyond excited seeing PANs again. I recently switched jobs and I am excited to announce that I am working with Palo Alto firewalls again.

Panorama firewall