New Palo Alto Firewall Web Setup

Ad – Purchase on Amazon

Last updated on November 17th, 2022 at 08:17 am

Here are my notes for the first-time setup of a Palo Alto Networks hardware firewall using the web interface.

Set computer Ethernet to IP 192.168.1.10. Connect to Management port of Palo Alto Firewall.

In a browser go to https://192.168.1.1

Default credentials: admin/admin

The unit may have e1/1 and e1/2 in the vwire config. If this is not needed, follow this procedure (in order) to remove the vwire config.

  1. Delete the default security policy, select Policies>Security, select the rule, and click Delete.
  2. Delete the default virtual wire, select Network>Virtual Wires, select the virtual wire and click Delete.
  3. Delete the default trust and untrust zones, select Network>Zones, select each zone and click Delete.
  4. Delete the interface configurations, select NetworkI>nterfaces and then select each interface (ethernet1/1 and ethernet1/2) and click Delete.

Commit the changes.

Need Console Access?

Sometimes console access is needed. Click here for my post on setup via the CLI. Also, I recommend using an all-in-one USB console cable. Click here for my post describing console ports and cables.

References:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/getting-started/integrate-the-firewall-into-your-management-network/set-up-network-access-for-external-services

Copyright © Packet Passers 2024