building a lab with PA-440 or VMs

[catalin.ciubotariu]

Hello everyone,

I have some knowledge about PaloAlto NGFW but now I intend to focus and get some certifications. For that I bought a PA-440 which runs 11.2.5 and I intend to buy a second one which doesn't have an active license and running 10.2.3-h2. Both are from ebay, so second hand.

Looks like I'm gambling if I want to buy a lab license because I'm not sure will be possible.

Since the purpose is lab, building a functional cluster, and learn, what are my options now? Is this feasible?

Should I buy VMs licenses instead?

Many thanks for your time,
Catalin

[JayGolf]

Hi @catalin.ciubotariu ,

Id recommend holding off on that second unit and then take a look at the Secondary Market Policy. You will have to "place two orders through a Palo Alto Networks authorized local reseller. The first order must be for a non-refundable certification fee and the second for a one time activation fee and the purchase of a one year support subscription (you may purchase a longer support subscription if desired but the purchase it at minimum a one year subscription). The purchase of other subscriptions or services are optional." 

Take a look to see if you can get your 440 operational and supported first since you purchased the box already. If you're able to get it certified and licensed, id recommend spinning up a VM-series in the public cloud. That way you can have your on-prem physical fw as well as simulate a connection to a vm-series in hosted in the cloud. There are a lot of scenarios you can run through with that. 

Good luck on your training and please keep us updated on how labbing goes. 

[catalin.ciubotariu]

Hi Jay,

Many thanks for your feedback. I knew about the Secondary Market Policy, that's why I asked the question. I will look into the VM option, as well.

Weird that I didn't received any notification about your reply on my email (even with the option checked). Is it the same for you? We have to check manually from time to time?

Thanks,

Catalin

 

[BPry]

@catalin.ciubotariu,

Personally I would question the requirement to actually have an HA lab setup. If you're only using the lab for certification work the cost of maintaining both would be similar to just getting a licensed LAB hardware bundle. From a certification standpoint, having a fully licensed standalone box would do you a better service than having two completely unlicensed boxes solely for learning about HA. The HA capability is something that is easily learned solely through studying that don't really require hands on experience to pass the certification exams.