Rebuilding Palo Alto Firewall

Palo Alto Firewall 
Firewall Tasks

Factory Reset and IP management
Zone and L3 interfaces
Default IP route(s)
DHCP Services
Source NAT configuration
Initial Security Policy
Decryption (SSL Forward Proxy)


Factory Reset and IP management
-------------------------------
> debug system maintenance-mode
y

maintance mode
Factory Reset
Panos-11-0.1
Uncheck Scrub
Factory Reset
Reboot

Do you want to exit ZTP mode and configure your firewall in standard mode  Yes


IP Management
-------------
Login: admin
Password: admin
Old Password:
New Password:


Initial Bootstrap

configure
set deviceconfig system hostname FW-19
set deviceconfig system ip-address 192.168.1.19 netmask 255.255.255.0
set deviceconfig system default-gateway 192.168.1.1 
set deviceconfig system dns-setting servers primary 192.168.1.100 
set deviceconfig system dns-setting servers secondary 8.8.8.8
set deviceconfig system ntp-servers primary-ntp-server-address O.north-america.pool.ntp.org

commit    (candidate to Running config)

cli 
ssh 192.168.1.19
> show system info 

WebUI
https://192.168.1.19

Registration and Licenses
device 
Licenses 
retrieve licenses from liscense server

Software 
check now 

Dynamic Update
check now 

Anti virus  
Applications and threats

commit


Zone and L3 Interface
---------------------
create zone 
inside
outside

Create Interface 
interface 1/4
Layer 3
router default
Zone Outside
IP address 23.1.2.19/24

Create Interface 
interface 1/5
Layer 3
router default
Zone Outside
IP address 24.1.2.19/24

Commit 

Testing Data plane interface
Validate IP in the correct Zone
> Ping source 23.1.2.19 host 23.1.2.1
> ping source 24.1.2.19 host 24.1.2.1

If you do a 
ping source 24.1.2.1 
This will fail because it will take the management Default gateway 


Default IP route(s)
-------------------
ISP A (prefer)
Ad - 10
Metric -10

ISP B
Ad - 20
Metric -20

shows existing routing table

>show routing route  

Nework <virtual router> <default>








https://www.youtube.com/watch?v=vMM8ob1jooM