Prepping / Joining a Palo Alto Firewall to Panorama

PanOS v10.1

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/getting-started/integrate-the-firewall-into-your-management-network/perform-initial-configuration

Get Console Access to the Device

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-cli-quick-start/get-started-with-the-cli/access-the-cli

Data rate: 9600
Data bits: 8
Parity: none
Stop bits: 1
Flow control: none

Connect your Console Cable to the Console Port of the Firewall

In my case I am using Linux. To connect the console cable I looked in the /dev/ directory for a TTY device and use screen to open it.

ls /dev/
screen /dev/ttyUSB0

Edit and use the commands below to prep your firewall for Panorama

configure
set deviceconfig system hostname sXXpanY
set deviceconfig system ip-address 192.168.1.10
set deviceconfig system netmask 255.255.255.0
set deviceconfig system default-gateway 192.168.1.1
set deviceconfig system domain network.local
set deviceconfig system dns-setting servers primary 8.8.8.8
set deviceconfig system dns-setting servers secondary 1.1.1.1
set deviceconfig system timezone US/Central
delete rulebase security rules rule1
delete zone trust
delete zone untrust
delete network virtual-wire default-vwire
delete network virtual-router default
delete network interface ethernet ethernet1/1
delete network interface ethernet ethernet1/2
commit

Now plug the Management port into your network switch and open the firewall’s web interface.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/use-the-web-interface/launch-the-web-interface#id73fd3bb4-7cef-412b-9902-a3a9f6115314

At the dashboard screen, copy your Serial Number.

https://ip-address/?#dashboard::vsys1

Login to your Panorama Web Interface

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/panorama-web-interface/use-the-panorama-web-interface#id45c59ef4-1dad-43be-a001-c00078d998d6

Go to the Panorama Tab, then Managed Devices on the left column, and on the summary page scroll to the bottom click on Add Device. Paste your serial number in the Serial field. And click on Generate Auth Key.

Click on Copy Auth Key to clipboard.

Commit your changes in Panorama

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer-panorama/preview-validate-or-commit-configuration-changes#id9c44b489-fd7d-49c8-9d64-0203cacccdfb

Back on the firewall’s web interface, go to the Device Tab, Setup on the left column, and on the management sub-tab click on the gear at the top right of the Panorama Settings Section. Enter the IP or host-name of your panorama server. Paste the Auth Key from your clipboard in the Auth Key field. Click OK.

Commit your changes to the firewall.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/use-the-web-interface/commit-validate-and-preview-firewall-configuration-changes