Configure Palo Alto VM 6.0.0 in Vmware Workstation and ESXi-优快云博客

本文详细介绍了如何在虚拟环境中部署和配置 Palo Alto Networks 的虚拟防火墙 VM 系列，包括导入 VM、在 ESXi 和其他虚拟化平台上的部署、基本配置以及测试步骤。

Palo Alto Networks has developed Virtualized Firewalls VM series to run in virtual environment. Here is the list for supported hypervisors from its website:

The VM-Series supports the exact same next-generation firewall and advanced threat prevention features available in our physical form factor appliances, allowing you to safely enable applications flowing into, and across your private, public and hybrid cloud computing environments.Automation features such as VM monitoring, dynamic address groups and a REST-based API allow you to proactively monitor VM changes dynamically feeding that context into security policies, thereby eliminating the policy lag that may occur when your VMs change.The VM-Series supports the following hypervisors:

VMWare ESXi and NSX

Citrix SDX,

KVM (Centos/RHEL)

Ubuntu

Amazon Web Services

There are four models for different requirements:

VM-100
VM-200
VM-300
VM-1000-HV

I have got a VM including two files (PA-VM-6.0.0.ovf and PA-VM-6.0.0-disk1.vmdk) and deployed it into my lab environment to test. Here are some steps:
1. Imported VM into Vmware workstation

It was successful but need a 64-bit host and Intel VT-x need to be enabled for running this VM in Workstation.

1.Error%2Bfor%2B64bits.png?resize=320%2C237

2. Deploy OVF file into ESXi lab

By selecting “File -> Deploy OVF Template… “, you can deploy OVF into ESXi.

I havd to change network adapter 2 to Internal v_switch and keep the network adapter 1 to Internet v_switch.

1-3-2015%2B11-03-44%2BAM.png?resize=320%2C283

3. Start VM in ESXi Lab Enviroment

You will need to wait 1 minute to log in after login prompt shows up.

1-3-2015%2B10-33-19%2BAM.png?resize=320%2C149

Type admin / admin as username and password after Login prompt shows up for 1 minute.

1-3-2015%2B11-05-56%2BAM.png?resize=320%2C131

4. Basic configuration:

4.1. Once you got to the prompt ([email protected]), type

“configure”

4.2. You are now in the config mode, type the following command in order to give an IP address for the

PAN management and Web Access,

set deviceconfig system ip-address 192.168.2.10 netmask 255.255.255.0 default-gateway 192.168.2.1 dns-setting servers primary 8.8.8.8

4.3. Hit Enter and then Type “commit”

note: Remember that we can use “?” to see all the commands and use “TAB” to complete the commands

1-3-2015%2B10-46-45%2BAM.png?resize=320%2C176

5. Test

Try to ping the IP address of the PAN-OS and If successful, then open a browser and type “https://192.168.2.10″Use the admin / admin for username and password.