Problem in making palo alto test lab

[ahmed.ashraf]

Dears ,

i installed palo alto ova and windows xp client and host is windows 10 , i am trying to make a test lab using cbtnuggets and my configuration as the following :

1- windows XP is on VMnet3 and has IP : 10.3.3.11/24

2- i added all VMnet to palo alto virtual machine to be able to make inside , DMZ and outside

3- i configured interface 1/1 in the same range of windows XP client : 10.3.3.10/24 , VR is default , Zone : inside

4- Host VMnet 3 IP is : 10.3.3.1/24

5- MAC addresses are different

 6- palo alto able to ping google.com

issue is : host and XP can't ping palo alto interface 1/1 although host and XP can ping each other

i tried to use different VMnet still the same issue , tried to configure other interface in palo alto with different IP even in outside also can't ping

please i want your fast response and help

[TranceforLife]

Is mgmt profile attached and allowing ping to the interface 1/1?

[DonohoeRobert]

Hi Mate, 

Just remember when setting the interfaces up, the first one is managment, second is 1/1, third is 1/2

best regards, 

Rob 

[RichColeman]

Have a look at EVE-NG, its slighty easier than GNS3 for integrating a Palo. You don't have to worry about playing about with specific VMNIC mappings etc.

[TranceforLife]

l love GNS3 but never heard about this  EVE-NG project.  Something new today! Thanks 

[MohamedSharief]

Hi Ahmed,

If you are sure about the vmware configurations then you need to enable some feature for PA VM only in order to be able to ping from the XP client to PA trust interface:

Without enabling this you won't be able to ping from your host to the trust interface of PA VM.

You can find it in Device> Setup> Management> General Settings.

Let me know if that worked with you!

Regards,

Sharief