Normally if you want to advertise a route to your BGP neighbor, the route you want to announce must be available in your routing table but in Palo Alto Networks there is a nice trick which is quite handy. Where can it be really handy? For example you have a subnet which you only use
Read More »

if you somehow end up having hundreds of address objects in a PAN firewall and you would like to delete all of them, good luck! probably to prevent accidental removal there is no way on GUI as of now on 7.1.x releases (or I don’t know yet) but if you want to you can use
Read More »

Panorama is a nice management tool. It is nice compared to NSM and Security Director:) On the other hand, I had to deal with an issue which is address group content on panorama was different than the firewall. Here is an example; Panorama had AddGroup1 = Addr1 , Addr2, Addr3 Firewall had AddGroup1 = Addr1,
Read More »

This post aims to give an introduction to configuring Palo Alto Networks firewall for initial deployment as it is for beginners, I would like to cover the following topics; Configure management interface settings (i.e IP Address, default gateway) via console Assign IP addresses to ethernet interfaces and default gateway Configure NAT and Security Policies to
Read More »

Once you are familiar with one firewall, sometimes it is difficult to be comfortable on another firewall. Here I will list 2 things that you do differently on these firewalls. At least these were the first things I noticed. 1) PING On an SRX firewall, if you ping a remote address, command will be accepted.
Read More »