Next-Generation Firewall
Configure Interfaces
Table of Contents
Expand All
|
Collapse All
Next-Generation Firewall Docs
-
-
- Cloud Management of NGFWs
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
- PAN-OS 9.1 (EoL)
-
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1 & Later
-
-
- Cloud Management and AIOps for NGFW
- PAN-OS 10.0 (EoL)
- PAN-OS 10.1
- PAN-OS 10.2
- PAN-OS 11.0
- PAN-OS 11.1
- PAN-OS 11.2
- PAN-OS 8.1 (EoL)
- PAN-OS 9.0 (EoL)
- PAN-OS 9.1 (EoL)
Configure Interfaces
Configure your Palo Alto Networks Next-Gen Firewall interfaces.
Contact your account team to enable Cloud Management for NGFWs using Strata
Cloud Manager.
Where Can I Use This? | What Do I Need? |
---|---|
|
One of these:
|
A Palo Alto Networks® next-generation
firewall can operate in multiple deployments at once because the
deployments occur at the interface level. For example, you can configure
some interfaces for Layer 3 interfaces to integrate the firewall
into your dynamic routing environment, while configuring other interfaces
to integrate into your Layer 2 switching network.
- Configure a Tap Interface
- Configure a Layer 2 Interface
- Configure a Layer 3 Interface
- Configure an Aggregate Ethernet Interface Variable
- Configure a Subinterface
- Configure an Aggregate Interface Group
- Configure a VLAN
- Configure a Loopback Interface
- Configure a Tunnel Interface
Override an Interface
When a firewall is managed by Strata Cloud
Manager, all configuration changes must be performed through the Strata Cloud
Manager interface. If you need to override the settings for specific interfaces
that are inherited from a parent folder in a child folder, follow these
steps:
- Log in to Strata Cloud Manager.Select ManageConfigurationNGFW and Prisma AccessDevice SettingsInterfaces.Choose the interface: Ethernet, VLAN, Loopback, or Tunnel. Note that you cannot override a Cellular interface.Select a firewall from the Configuration Scope or select Snippets.Select the interface and Override it.A confirmation pop-up appears. Click Yes to override the interface, or No to cancel the override process.This doesn't override the zone or logical routers.