Access the CLI
Use a terminal emulator, such as PuTTY, to connect to the CLI of a Palo Alto Networks device in one of the following ways:
- SSH Connection—To ensure you are logging in to your firewall and not a malicious device, you can verify the SSH connection to the firewall when you perform initial configuration. After you have completed initial configuration, you can establish a CLI connection over the network using a secure shell (SSH) connection.
- Serial Connection—If you have not yet completed initial configuration or if you chose not to enable SSH on the Palo Alto Networks device, you can establish a direct serial connection from a serial interface on your management computer to the Console port on the device.
- Launch the terminal emulation software and select
the type of connection (Serial or SSH).
- To establish an SSH connection, enter the hostname or IP address of the device you want to connect to and set the port to 22.
- To establish a Serial connection, connect a serial interface on management computer to the Console port on the device. Configure the Serial connection settings in the terminal emulation software as follows:
- Data rate: 9600
- Data bits: 8
- Parity: none
- Stop bits: 1
- Flow control: none
- When prompted to log in, enter your administrative username.The default superuser username is admin. To set up CLI access for other administrative users, see Give Administrators Access to the CLI.If prompted to acknowledge the login banner, enter Yes.
- Enter the administrative password.The default superuser password is admin. However, for security reasons you should immediately change the admin password.After you log in, the message of the day displays, followed by the CLI prompt in Operational mode:
username@hostname>You can tell you are in operational mode because the command prompt ends with a >.
Establish an SSH Connection
Establish an SSH Connection To access the WildFire appliance software CLI: Use terminal emulation software to establish an SSH console connection with the WildFire appliance. ...
Log in to the Panorama CLI
Log in to the Panorama CLI You can log in to the Panorama CLI using a serial port connection or remotely using a Secure Shell ...
Access the Maintenance Recovery Tool (MRT)
Access the Maintenance Recovery Tool (MRT) The Maintenance Recovery Tool (MRT) enables you to perform several tasks on Palo Alto Networks firewalls and appliances. For ...
Verify SSH Connection to Firewall
Verify the SSH connection to the management port on the firewall to verify remote access to the correct device. ...
Reset the Firewall to Factory Default Settings
Reset the Firewall to Factory Default Settings Resetting the firewall to factory defaults will result in the loss of all configuration settings and logs. Set ...
Deploy Panorama with Dedicated Log Collectors
Deploy Panorama with Dedicated Log Collectors The following figures illustrate Panorama in a distributed log collection deployment. In these examples, the Panorama management server comprises ...
Perform Initial Configuration
Perform Initial Configuration By default, the firewall has an IP address of 192.168.1.1 and a username/password of admin/admin. For security reasons, you must change these ...
Perform Initial Configuration of the M-Series Appliance
Perform Initial Configuration of the M-Series Appliance By default, Panorama has an IP address of 192.168.1.1 and a username/password of admin/admin. For security reasons, you ...
Set Up the M-Series Appliance as a Log Collector
Set Up the M-Series Appliance as a Log Collector If you want a dedicated appliance for log collection, configure an M-100, M-200, M-500, M-600 appliance ...