topic Re: Management of the Palo in General Topics https://live.paloaltonetworks.com/t5/general-topics/management-of-the-palo/m-p/31357#M22946 <HTML><HEAD></HEAD><BODY><P>I would recommend you to use the physical mgmt-interface (on the box) as your primary way of management.</P><P></P><P>In Device -&gt; Setup -&gt; Services you can click on Service Route Configuration in case you need to "reroute" which interface is used for updates as example (updates goes through mgmt-interface by default but you can "reroute" this to use a dataplane interface instead without having to expose your management for the whole world).</P><P></P><P>Then if you need a secondary mgmt-interface you can create such in Network -&gt; Network Profiles -&gt; Interface Mgmt by setting up a Interface Management Profile, dont forget to define Permitted IP Addresses while you setup this dataplane mgmt interface.</P></BODY></HTML> Thu, 31 May 2012 20:15:23 GMT mikand 2012-05-31T20:15:23Z Management of the Palo https://live.paloaltonetworks.com/t5/general-topics/management-of-the-palo/m-p/31356#M22945 <HTML><HEAD></HEAD><BODY><P>Hello</P><P></P><P>I have my Palo on a different IP range to my local network and wish to be able to connect to the palo to manage it from my local lan ip range. is this possible</P><P></P><P>my palo is on a 213.x.x.x which is the isp range</P><P>my lan is on a 10.x.x.x.x range.</P><P></P><P>Mark</P></BODY></HTML> Thu, 31 May 2012 13:39:05 GMT https://live.paloaltonetworks.com/t5/general-topics/management-of-the-palo/m-p/31356#M22945 notleyhigh 2012-05-31T13:39:05Z Re: Management of the Palo https://live.paloaltonetworks.com/t5/general-topics/management-of-the-palo/m-p/31357#M22946 <HTML><HEAD></HEAD><BODY><P>I would recommend you to use the physical mgmt-interface (on the box) as your primary way of management.</P><P></P><P>In Device -&gt; Setup -&gt; Services you can click on Service Route Configuration in case you need to "reroute" which interface is used for updates as example (updates goes through mgmt-interface by default but you can "reroute" this to use a dataplane interface instead without having to expose your management for the whole world).</P><P></P><P>Then if you need a secondary mgmt-interface you can create such in Network -&gt; Network Profiles -&gt; Interface Mgmt by setting up a Interface Management Profile, dont forget to define Permitted IP Addresses while you setup this dataplane mgmt interface.</P></BODY></HTML> Thu, 31 May 2012 20:15:23 GMT https://live.paloaltonetworks.com/t5/general-topics/management-of-the-palo/m-p/31357#M22946 mikand 2012-05-31T20:15:23Z