Management of the Palo

[notleyhigh]

Hello

I have my Palo on a different IP range to my local network and wish to be able to connect to the palo to manage it from my local lan ip range. is this possible

my palo is on a 213.x.x.x which is the isp range

my lan is on a 10.x.x.x.x range.

Mark

[mikand]

I would recommend you to use the physical mgmt-interface (on the box) as your primary way of management.

In Device -> Setup -> Services you can click on Service Route Configuration in case you need to "reroute" which interface is used for updates as example (updates goes through mgmt-interface by default but you can "reroute" this to use a dataplane interface instead without having to expose your management for the whole world).

Then if you need a secondary mgmt-interface you can create such in Network -> Network Profiles -> Interface Mgmt by setting up a Interface Management Profile, dont forget to define Permitted IP Addresses while you setup this dataplane mgmt interface.