topic P-A 220 Firewall - Basics in General Topics

P-A 220 Firewall - Basics

ibuildp — Thu, 12 Jan 2023 10:37:01 GMT

I recently joined a company that has some P-A 220 firewalls. I have access but for now it's "read-only" whilst I am learning, I am trying to find my way around the GUI web interface but even looking up a device by MAC address doesn't seem obvious.

Is there a end user guide or manual that might help me become familiar quicker with navigating the interface? If not I guess I'll figure it out and ask around the company for some help 🙂

Thankyou

Re: P-A 220 Firewall - Basics

ibuildp — Thu, 12 Jan 2023 13:51:33 GMT

i.e when I try to create a filter for a MAC address XX:XX:XX:XX:XX:XX the search just gives "syntax error"

Re: P-A 220 Firewall - Basics

Raido_Rattameister — Thu, 12 Jan 2023 14:15:35 GMT

You can use command "find command keyword keyword" to find cli commands.

For example "> find command keyword arp"

"> show arp ?" will show you suboptions of arp command.

To filter out mac you can use part of the mac address with match:

"> show show arp all | match b2:3d"

Re: P-A 220 Firewall - Basics

ibuildp — Thu, 12 Jan 2023 16:23:55 GMT

Hi and thanks for replying to my post 👍

I have only http access to the firewall so within the GUI web interface, I don't see somewhere to enter console commands like you mentioned.

Re: P-A 220 Firewall - Basics

Raido_Rattameister — Thu, 12 Jan 2023 16:29:02 GMT

What exactly do you need to accomplish?

There are few troubleshooting tasks you can do from GUI (Device > Troubleshooting) but for checking arp you need CLI.

Re: P-A 220 Firewall - Basics

ibuildp — Thu, 12 Jan 2023 16:48:27 GMT

We recently had a video intercom fitted, it's on a VLAN which goes through the firewall and onto a WAN.

The device (of which I have IP and MAC) is having trouble reaching it's SIP registrar cybergate.cybertwice.com

I'm hoping to see whats being blocked, so I can suggest the changes needed/rules to allow the traffic

Re: P-A 220 Firewall - Basics

TomYoung — Thu, 12 Jan 2023 16:50:20 GMT

Hi @ibuildp ,

In response to your question about an end user guide, the online Administrator's Guide is very well written -> https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/getting-started. You should be able to quickly navigate to the features you need. Also, the free Firewall Essentials course on https://beacon.paloaltonetworks.com is very good.

Thanks,

Tom