End-of-Life (EoL)

Provision the VM-Series Firewall on the SDX Server

  1. Access the SDX server.
    Launch the web browser and connect to the SDX server.
  2. Create the VM-Series firewall.
    Allocate the total number of data interfaces that you might require on the VM-Series firewall during initial deployment. Adding or removing interfaces to the VM-Series firewall after initial deployment will cause the data interfaces (Eth 1/1 and Eth 1/2) on the VM-Series firewall to re-map to the adapters on the SDX server. Each data interface sequentially maps to the adapter with the lowest numerical value, and can therefore cause a configuration mismatch on the firewall.
    1. Select
      Palo Alto VM-Series
    2. Click
    3. Enter a name for the VM-Series firewall.
    4. Select the .xva image that you uploaded earlier. This image is required to provision the firewall.
    5. Allocate the memory, additional disk space, and the virtual CPUs for the VM-Series firewall. To verify resource allocation recommendations, see VM-Series on SDX System Requirements.
    6. Select the network interfaces:
      • Use the management interfaces 0/1 or 0/2 and assign an IP address, netmask, and gateway IP address.
      If needed, you can use a data interface on the SDX server for managing the firewall.
      • Select the data interfaces that will be used for handling traffic to and from the firewall.
      If you plan to deploy the interfaces as Layer 2 or virtual wire interfaces, select the Allow L2 Mode option so that the firewall can receive and forward packets for MAC addresses other than its own MAC address.
    7. Review the summary and click
      to begin the installation process. It takes 5-8 minutes to provision the firewall. When completed, use the management IP address to launch the web interface of the firewall.
      Continue with Activate the License.

Recommended For You