PA 500 Cisco 3560

[phugiay]

Hi there, 

I am totally new here in Paloalto firewall. I have PA 500 and want to do lab test and I want to find a basic instruction to set up PA to connect internet and also connect to Cisco switch. I am very familiar with Cisco ASA and switch since we do all CLI but I understand PA firewall is all GUI. Any help I would be appreciate. 

My understand is I need a license to update OS. 

Thank you

Vincent

[Raido_Rattameister]

As PA-500 is end of sale (https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dat...) you most likely won't be able to re-activate already expired support subscription to download latest supported PANOS updates (8.1.x in case of PA-500). 

"A product must be covered by a support contract as of the End-of-Sale date to be eligible for support renewal. Support contracts may be renewed for the duration of the End-of-Life cycle, and cannot be allowed to lapse during this time and be reinstated later."

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-policy

Check https://beacon.paloaltonetworks.com/student/collection/660313-next-generation-firewall for learning materials

[TomYoung]

Hi @phugiay ,

Beacon is a great resource as @Raido_Rattameister mentioned.  I recommend searching for "Firewall Essentials" and going through that course.  It is most excellent and free.

If you want something faster to get you up and running, go to the Administrator's Guide, https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin.  It has great links for basic configurations to get you going.

Since you know the ASA, you are already very familiar with FW concepts.  These links will help you learn the GUI and additional NGFW material.

Thanks,

Tom

[phugiay]

Hi Raido_Rattameister. 

Thank you for the advise. I think I am OK for version 9. I want to play with PA 500 first before go to the real PA 850. I can be able to connect to internet to PA 500 . 

My next step how to connect PA to one port from Cisco switch like we do in Cisco ASA. 

[Raido_Rattameister]

Check if this helps

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/getting-started/segment-your-network-using...