Day-zero Configuration of Palo-Alto

[Sujanya]

Hi All,

I heard day-zero configurations of the Palo-Alto firewall we can perform via the free service provided by Palo-Alto.

Do anybody having the visibility here.

[PavelK]

Hello @Sujanya

there is a Day 1 configuration that can be generated from CSP. Here is the KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PM2lCAG ? Is it what you were looking for?

Kind Regards

Pavel

[Sujanya]

Hi Pavel,

Thanks for the information. This is really helpful. But we are looking for is there any ways to configure day-zero configuration via PAN portal.

[PavelK]

Thank you for reply @Sujanya

the link I shared is the only way I am aware of. I believe there is nothing else available from CSP. If you have a Panorama in your environment, you can leverage: "Auto Push on 1st Connect" to streamline onboarding of Firewalls. Other than this I can't think of anything else.

Kind Regards

Pavel

[Sujanya]

Hi Pavel,

Thanks for the information. We have panorama in our environment and will further check on "Auto Push on 1st Connect" option available in Panorama.

Having one doubt on Day 1 configuration via CSP portal, Do we need to take the console of Palo-Alto and set-up the management interface to make it access via GUI and later we need to use this day1 config tool of PAN to create a baseline xml file  of PAN configuration which can be loaded to firewall later.
(or)
Running Day1 config itself will set-up the management interface Ip(which we will providing during running the tool) and later it would be accessible via GUI. Later generated file can be imported.