topic Re: managment port importance? in General Topics

managment port importance?

chuckles — Sun, 05 May 2019 09:14:32 GMT

this is my first time deploying palo alto , is it important to have the managment port connected? does it play important role in the device function or is it just solely for managment?

like can i manage the device from the inside interface only?

Re: managment port importance?

Mick_Ball — Sun, 05 May 2019 12:10:05 GMT

You can manage the device from any interface, the management port is there if you need it for out of band management, it is seperate from all your other interfaces. If you dont use OOB management then you dont have to configure it but please note that all your service routes, ldap, updates, dns etc are by default going to use this interface, so if you dont use it then modify your service routes via another interface.

Re: managment port importance?

Remo — Sun, 05 May 2019 17:29:03 GMT

Hi @chuckles

As mentionned by @Mick_Ball, yes you can manage the device without the mgmt port. But in addition to the described things in case of problems on the dataplane you will no longer be able to manage the firewall (except if you are able to connect remotely to the console port).

In addition to that I would also recommend to use the management port because of security reasons, as you could logically place the managementnport behind another dedicated management firewall for example.

Re: managment port importance?

chuckles — Sun, 05 May 2019 18:44:35 GMT

what do you mean by service routes?

Re: managment port importance?

Remo — Sun, 05 May 2019 19:03:25 GMT

@chuckles wrote:
what do you mean by service routes?

--> https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/service-routes