MB Tech Talker
MB Tech Talker
  • 39
  • 303 322
Panorama Templates and Template Stacks
In this video, I want to show you how I configure PAN-OS firewalls in Panorama using Templates and Template Stacks
Check out my blog at www.mbtechtalker.com
Templates and Template Stacks
docs.paloaltonetworks.com/panorama/10-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks
Watch these videos next!
🎥 How to migrate a High Availability pair of PAN-OS firewalls into Panorama - th-cam.com/video/MPlU2Crcd4c/w-d-xo.html
🎥 Panorama Baseline High Availability Configuration - th-cam.com/video/1nhpzJ2ehhQ/w-d-xo.html
🎥 Deploying a PAN-OS Panorama KVM image in EVE-NG - th-cam.com/video/9J9qgaSqcxc/w-d-xo.html
🎥 - Home lab - Cisco UCS EVE-NG lab Server Setup - th-cam.com/video/t_B6wRkbk9s/w-d-xo.html
🎥 Home Lab - Cisco UCS C240 M4 hardware walkthrough - th-cam.com/video/oOuMRz8MJfQ/w-d-xo.html
🎥 Palo Alto firewall lab using VMware Workstation - th-cam.com/video/fEz-5vzkCNk/w-d-xo.html
🎥 GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6 - th-cam.com/video/tIZ9GY2yATc/w-d-xo.html
🎥 - How to Configure Automatic User Certificate Enrolment in Windows Server 2016 / 2019 - th-cam.com/video/veEVjYTpub4/w-d-xo.html
🎥 GlobalProtect Pre-logon using a machine certificate - PAN-OS 10.0.6 th-cam.com/video/mWE_liNOnM4/w-d-xo.html
🎥 How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019 - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html
🎥 How to Install Microsoft Certificate Services - th-cam.com/video/58WQIu0VUTw/w-d-xo.html
🎥 How to configure Palo Alto Firewall Signature Based Security Profiles in PAN-OS 9.1- th-cam.com/video/vTNS88UT8Vc/w-d-xo.html
🎥 Palo Alto Firewall Active-Passive HA VMware Workstation Lab- th-cam.com/video/Pn8JcO6iAP8/w-d-xo.html
🎥 User-ID - th-cam.com/video/hBFum5k7LWE/w-d-xo.html
🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html
Subscribe for more:
th-cam.com/users/MBTechTalker
Share this video with a friend:
th-cam.com/video/OmY3WYNJkgw/w-d-xo.html
🎥 Watch next
How To Configure A Certificate For Secure PAN-OS Web GUI Access
th-cam.com/video/7qXcb3IT664/w-d-xo.html
🐦 Twitter - @mbtechtalker
🌐. Blog - www.mbtechtalker.com
☕. buymeacoffee.com/mbtechtalker
มุมมอง: 8 025

วีดีโอ

Home Lab - Cisco UCS C240 M4 - NVME M2 SSD upgrade
มุมมอง 4.4K2 ปีที่แล้ว
Just a short video, showing an NMVE.M2 SSD upgrade to my UCS C240 M4 lab server to resolve performance issues whilst working in EVE-NG labs using Palo Alto Network Panorama and PAN-OS firewalls. Hardware used: NVMe PCIe M.2 Adapter and M.2 SATA Adapter www.amazon.co.uk/gp/product/B07GDFX3YJ/ref=ppx_yo_dt_b_asin_title_o07_s00?ie=UTF8&psc=1 Samsung 970 EVO Plus 1 TB PCIe NVMe M.2 www.amazon.co.uk...
How to migrate a High Availability pair of PAN-OS firewalls into Panorama
มุมมอง 18K2 ปีที่แล้ว
In this video, I want to show you how I migrate a HA pair of PAN-OS firewalls into Panorama inside my EVE-NG lab. Check out my blog which compliments this video where I provide a step-by-step tutorial. Migrate a Firewall HA Pair to Panorama Management docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-t...
Panorama Best Practices Assessment
มุมมอง 1.7K2 ปีที่แล้ว
In this video, I want to show you how I run a Palo Alto Networks Best Practices Assessment (BPA) against a Panorama configuration inside my EVE-NG lab. Check out my blog which compliments this Palo Alto Networks Best Practices Assessment video where I provide a step-by-step tutorial. Best Practice Assessment for NGFW and Panorama www.paloaltonetworks.com/services/bpa Watch these videos next! 🎥 ...
Virtual Panorama Log Collector Setup
มุมมอง 6K2 ปีที่แล้ว
In this video, I wanted to show you how I configure a Palo Alto Networks Virtual Panorama log collector inside my EVE-NG lab. Check out my blog which compliments this panorama log collector setup video where I provide a step-by-step tutorial. Panorama Administrator guide docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panor...
Panorama Baseline High Availability Configuration
มุมมอง 2.7K2 ปีที่แล้ว
In this video, I wanted to show you how I configure a Palo Alto Networks Panorama with a Baseline High Availability Configuration inside my EVE-NG lab. Check out my blog which compliments this video at www.mbtechtalker.com/panorama-baseline-configuration where I provide a step-by-step tutorial. Panorama High Availability - Panorama Administrator guide docs.paloaltonetworks.com/panorama/10-1/pan...
Deploying a PAN-OS Panorama KVM image in EVE NG
มุมมอง 4.9K2 ปีที่แล้ว
In this video, In this video, I wanted to show you how I deploy a Panorama KVM qcow2 image into my EVE-NG lab. Check out my blog which compliments this video at www.mbtechtalker.com/deploying-panorama where I provide a step-by-step tutorial. Set up a Panorama Virtual Appliance in Panorama Mode docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-app...
Home lab - Cisco UCS C240 M4 EVE-NG lab Server Setup
มุมมอง 3.6K2 ปีที่แล้ว
In this video, I provide an update on my Cisco UCS lab server setup, explain how I use TP-Link Tapo P110 wifi smart plugs, and show the specific VMware ESXi 7.0 settings I used to install EVE-NG Pro. Check out my blog at www.mbtechtalker.com. Watch these videos next! 🎥 Home Lab - Cisco UCS C240 M4 hardware walkthrough - th-cam.com/video/oOuMRz8MJfQ/w-d-xo.html 🎥 Palo Alto firewall lab using VMw...
Home lab - Cisco UCS C240 M4 hardware walkthrough
มุมมอง 12K3 ปีที่แล้ว
In this video, I walk through the Cisco UCS C240 M4 hardware that I purchased for my home ESXi lab. It also includes a brief demonstration of the Cisco Integrated Management Console (CIMC) functionality. Check out my new blog - www.mbtechtalker.com Watch these videos next! 🎥 Home lab - Cisco UCS EVE-NG lab Server Setup - th-cam.com/video/t_B6wRkbk9s/w-d-xo.html 🎥 Palo Alto firewall lab using VM...
GlobalProtect Client Certificate Authentication- PAN-OS 10.0.6
มุมมอง 14K3 ปีที่แล้ว
In the video, I will show you how I configure GlobalProtect to use Client Certificate Authentication on a VM-Series Palo Alto NGFW running PAN-OS 10.0.6. Make sure you check out my "How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019" so that you have a machine certificate in place. - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html Check out my new blog - www.mbtec...
How to Configure Automatic User Certificate Enrolment in Windows Server 2016/2019
มุมมอง 6K3 ปีที่แล้ว
How to Configure Automatic User Certificate Enrolment in Windows Server 2016 / 2019 Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to install Microsoft Certificate Services on Windows Server - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html 🎥 How To Configure A Certificate For Secure PAN-OS Web GUI...
GlobalProtect Pre-logon using a machine certificate - PAN-OS 10.0.6
มุมมอง 17K3 ปีที่แล้ว
In the video, I show you how I configure GlobalProtect Pre-logon using a machine certificate on a VM-Series Palo Alto NGFW running PAN-OS 10.0.6. Make sure you check out my "How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019" so that you have a machine certificate in place. - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html Check out my new blog - www.mbtechtalker....
How to Configure Automatic Computer Certificate Enrolment in Windows Server 2016 / 2019
มุมมอง 9K3 ปีที่แล้ว
How to Configure Automatic Computer Certificate Enrollment in WIndows Server 2016 / 2019 Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to install Microsoft Certificate Services on Windows Server - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html 🎥 How To Configure A Certificate For Secure PAN-OS We...
GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6
มุมมอง 22K3 ปีที่แล้ว
GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6 In the Video, I configure a GlobalProtect Portal and Gateway on a VM-Series Palo Alto NGFW on PAN-OS 10.0.6. I will be using this lab setup as a baseline configuration for up-and-coming GlobalProtect videos. Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to Install Microsoft Certificate Services - th-cam.c...
How To Configure A Certificate For Secure PAN-OS Web GUI Access
มุมมอง 11K3 ปีที่แล้ว
How To Configure A Certificate For Secure PAN-OS Web GUI Access Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to Install Microsoft Certificate Services - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥. Palo Alto firewall lab using VMware Workstation - th-cam.com/video/fEz-5vzkCNk/w-d-xo.html 🎥. How to configure Palo Alto Firewall Signature Based Security Profiles in ...
How to Install Microsoft Certificate Services
มุมมอง 1.5K3 ปีที่แล้ว
How to Install Microsoft Certificate Services
How to configure DNS Sinkhole on Palo Alto Networks Firewall PAN-OS 9.1
มุมมอง 6K3 ปีที่แล้ว
How to configure DNS Sinkhole on Palo Alto Networks Firewall PAN-OS 9.1
How to take Packet Captures on a Palo Alto Networks Firewall
มุมมอง 7K3 ปีที่แล้ว
How to take Packet Captures on a Palo Alto Networks Firewall
How to automatically import address objects into Palo Alto Networks Firewall
มุมมอง 10K3 ปีที่แล้ว
How to automatically import address objects into Palo Alto Networks Firewall
How to configure Data Filtering on Palo Alto Networks Firewall PAN-OS 9.1
มุมมอง 4.3K3 ปีที่แล้ว
How to configure Data Filtering on Palo Alto Networks Firewall PAN-OS 9.1
How to configure File Blocking on a Palo Alto Networks Firewall | PAN-OS 9.1
มุมมอง 4.8K3 ปีที่แล้ว
How to configure File Blocking on a Palo Alto Networks Firewall | PAN-OS 9.1
How to configure URL Filtering on a Palo Alto Networks Firewall | PAN-OS 9.1
มุมมอง 15K3 ปีที่แล้ว
How to configure URL Filtering on a Palo Alto Networks Firewall | PAN-OS 9.1
How to configure Palo Alto Networks Wildfire Analysis | PAN-OS 9.1
มุมมอง 3.6K3 ปีที่แล้ว
How to configure Palo Alto Networks Wildfire Analysis | PAN-OS 9.1
Palo Alto Firewall Signature Based Security Profiles | PAN-OS 9.1
มุมมอง 2.1K3 ปีที่แล้ว
Palo Alto Firewall Signature Based Security Profiles | PAN-OS 9.1
How to schedule PAN-OS Dynamic Updates
มุมมอง 6993 ปีที่แล้ว
How to schedule PAN-OS Dynamic Updates
PAN-OS upgrade lab
มุมมอง 3.3K4 ปีที่แล้ว
PAN-OS upgrade lab
Palo Alto NGFW Firewall Custom Response Pages lab using VMware Workstation
มุมมอง 5K4 ปีที่แล้ว
Palo Alto NGFW Firewall Custom Response Pages lab using VMware Workstation
Palo Alto NGFW SSL Forward Proxy Decryption & AD Certificate Services CSR on VMware Workstation
มุมมอง 5K4 ปีที่แล้ว
Palo Alto NGFW SSL Forward Proxy Decryption & AD Certificate Services CSR on VMware Workstation
Palo Alto Firewall App-ID lab on VMware Workstation
มุมมอง 9444 ปีที่แล้ว
Palo Alto Firewall App-ID lab on VMware Workstation
Palo Alto Firewall Windows User-ID Agent Lab using VMware Workstation
มุมมอง 13K4 ปีที่แล้ว
Palo Alto Firewall Windows User-ID Agent Lab using VMware Workstation

ความคิดเห็น

  • @brightubueme4080
    @brightubueme4080 20 วันที่ผ่านมา

    awesome video... however can you explain it a little bit more on cleaning up the template? i noticed before deleting the template for stack 2, the firewall in stack , firewall stack 1 initially has no idea of firewall 2, but it automatically got added immediately you deleted stack 2...is this the default behaviour?

  • @51w2
    @51w2 25 วันที่ผ่านมา

    Thanks for teaching us. This is very helpful.

  • @르브론시몬스
    @르브론시몬스 หลายเดือนก่อน

    Your PC desktop specs are important CPU, RAM

  • @SamuelPearson-rk9bn
    @SamuelPearson-rk9bn 2 หลายเดือนก่อน

    This may be two years old, but boy did it help me today with exactly this. Thank you!

  • @HaiTran-fi1uc
    @HaiTran-fi1uc 2 หลายเดือนก่อน

    so I did this same thing, but the file upload is still being allowed to google drive from my client machine, my lab client is sitting behind my firewall, and I've configured a NAT policy on the firewall to allow internet access from my client machine to the internet, and have tied the data filtering profile I created to the outbound security policy rule, not sure what I am doing wrong? I am doing this in my job's lab environment. I don't think decryption is required (as you did not configured decryption and access g-drive using https (encrypted)), but you were using PAN-OS 9.1 and I am using PAN-OS 10.X not sure if it makes a difference?

  • @ryanhoffmann4712
    @ryanhoffmann4712 2 หลายเดือนก่อน

    How did you get the server to boot to the m.2 ssd?

  • @sinisapodunavac437
    @sinisapodunavac437 3 หลายเดือนก่อน

    thank you, worked perfectly

  • @veerabsc
    @veerabsc 4 หลายเดือนก่อน

    EDL? 😂

  • @ramothkuissiTAMBO
    @ramothkuissiTAMBO 4 หลายเดือนก่อน

    Bravoooo!

  • @imrancisco1
    @imrancisco1 5 หลายเดือนก่อน

    Hi great video How the GP will work with PKI certificates? How it will work with existing machine certificates on the client machines? We have 12k users and we do not want to create new certificates and just want to using existing machine/user certificates

  • @ksrikanth7928
    @ksrikanth7928 5 หลายเดือนก่อน

    Hi Matt, When adding devices to Panorama, the primary device is connected but the passive device is shown as disconnected. Can you help me with this problem?

  • @justinwalsh5040
    @justinwalsh5040 6 หลายเดือนก่อน

    excellent video very important advice regarding importing HA-pair that alot of other demos dont factor in

  • @jimcouchmusic
    @jimcouchmusic 6 หลายเดือนก่อน

    Fantastic videos. I'm mostly watching for the info on templates because in importing all our firewalls into Panorama, we seem to have made a mess of them. But my question is about shared objects. One of those that we imported have a GREAT deal of objects that we imported as shared. You said in the video that, in the reverse situation, we can always move them into the shared objects... can you move them out of shared so that they are no longer shared? How would you do that? Thanks for all the great info.

  • @ShubhamSingh-yd8gz
    @ShubhamSingh-yd8gz 6 หลายเดือนก่อน

    Getting ready to implement this at a manufacturing plant for an automotive OEM this weekend. Watching this makes me feel really comfortable about the implementation. Very well done. Big thanks.

  • @benedictagyemang3862
    @benedictagyemang3862 7 หลายเดือนก่อน

    Very great training, thanks very much as you have save me a lot of time going through the docs.

  • @kohers
    @kohers 8 หลายเดือนก่อน

    this is no longer available on github - it was replaced with a "go" based solution, as far as I could find

  • @FatalSkeptic
    @FatalSkeptic 8 หลายเดือนก่อน

    so where's the part on actually installing the drive?

  • @FatalSkeptic
    @FatalSkeptic 8 หลายเดือนก่อน

    Hey, 2 years later, how's this thing going? I have an opportunity to get 1 of these.

  • @stevenramesh3225
    @stevenramesh3225 8 หลายเดือนก่อน

    Hi the method doesn’t work in our environment can advise if there’s any ways to help resolve the issue? I am to port the objects address groups to palo alto panorama from checkpoint.

  • @irvingsanchez4258
    @irvingsanchez4258 8 หลายเดือนก่อน

    Thanks for this helpful tutorial! Time to get down to work and practice!" If anyone needs the image, I used the following. It works for me!" drive.usercontent.google.com/download?id=1eZs3aUmFTzner_gX4YgbjXyOokhH3MbK&export=download&authuser=0

  • @joe618
    @joe618 9 หลายเดือนก่อน

    Thanks for sharing. I hope there will be more teachings.

  • @TheKamaladmire1
    @TheKamaladmire1 9 หลายเดือนก่อน

    this is absolutely amazing ( simple and straight forward)

  • @robertoospina10
    @robertoospina10 10 หลายเดือนก่อน

    Excellent guide. and the background tunes are great too!

  • @BahodirAlimovv
    @BahodirAlimovv 10 หลายเดือนก่อน

    Is there way to bulk upload security policies and NAT rules using this tool ?

    • @kohers
      @kohers 8 หลายเดือนก่อน

      I think for that you need to export the running config and add those new rules then import the config again with the changes - don't forget to "commit" after the load ofc

  • @oleksandrkotov1474
    @oleksandrkotov1474 11 หลายเดือนก่อน

    Thank you!

  • @batuhanbatuhan6445
    @batuhanbatuhan6445 11 หลายเดือนก่อน

    what do you need it for?

  • @ryanbuster4626
    @ryanbuster4626 11 หลายเดือนก่อน

    Well these override my fan policy and its set to high power as CIMC sees it as a foreign card. Bullshit lol. Thinking of trying a HHHL pcie ssd but I have no idea what models are supported and wont cause the fans to spin crazy loud.

  • @fidisiledif
    @fidisiledif 11 หลายเดือนก่อน

    If I have HA Palo Alto , how to set secure access Web GUI using self sign SSL ? Since I try still not solved

  • @ganeshan-o4b
    @ganeshan-o4b ปีที่แล้ว

    I get PA-HDF login, it is not changing, what is the minimum memory and HDD requirement to install Palo on VMware workstation

  • @RishiRap
    @RishiRap ปีที่แล้ว

    You seriously need to change the resolution in your videos to make it a little bigger to be able to be seen/viewed clearly. Such a small font size, Already having a headache trying watching your HIGH resolution video with so small font size.

  • @akilgolandaz2486
    @akilgolandaz2486 ปีที่แล้ว

    Is it possible to get the Palo Alto logs in Panorama without managing Palo Alto from Panorama. If yes please suggest the procedure, as I have already tried but not getting any success. I know is not a good practice but there is an exceptional request

  • @LanternDevilYT
    @LanternDevilYT ปีที่แล้ว

    Hi MB Tech, Is it possible to use PAN OS integrated userID agent for OpenLDAP server on windows server OS 2022…? If yes, under server monitoring tab. Which type should I choose… Microsoft Active Directory, Microsoft Exchange, Novell eDirectory, Syslog Sender. Nor should I use windows integrated User-ID agent..? Please help me in this.

  • @popescusilviu9948
    @popescusilviu9948 ปีที่แล้ว

    fantastic content

  • @shamsugrace
    @shamsugrace ปีที่แล้ว

    How to migrate Active-Active HA Pair?

  • @hystrixlignum8983
    @hystrixlignum8983 ปีที่แล้ว

    Hey, this was very helpful in doing this next week for our environmment.

  • @navdahmd
    @navdahmd ปีที่แล้ว

    Hi, Excellent Video...how can i get panorama image...please guide i am student and learning PAN-OS 10

  • @muhammadatif2148
    @muhammadatif2148 ปีที่แล้ว

    Hi thanks for video, can we apply changes (IP changes or route addition) in Template stack instead of selecting device template?

  • @suganthik3202
    @suganthik3202 ปีที่แล้ว

    Hi, a very detailed one...useful too..can you explain us or share any assessment doc for the firewalls as well

  • @popescusilviu9948
    @popescusilviu9948 ปีที่แล้ว

    This is a great feature! I did not know about it. Loving your panorama videos. Absolute gold

  • @popescusilviu9948
    @popescusilviu9948 ปีที่แล้ว

    Thank you so much for your work!

  • @ryand7242
    @ryand7242 ปีที่แล้ว

    I just strugglebussed trying to get this to work for hours. Your video got it done in 15 mins. thanks man.

  • @blahblah4634867
    @blahblah4634867 ปีที่แล้ว

    Whenever I set up the PA VM on VMWare it says the Firewall tried to activate promiscuous mode on the two custom interfaces but was blocked. Is this required?

  • @sachinwarad10
    @sachinwarad10 ปีที่แล้ว

    Great Video. So So much better than online document. Thanks for this. 1 Query while creating Cert Profile you selected Root CA, instead of this can I use my Local Enterprise Root CA & Intermediate CA? Bcoz machine & user cert are signed using Local Enterprise CA?

  • @akhilbhattar1226
    @akhilbhattar1226 ปีที่แล้ว

    After following this procedure, my device group was fine but the template values in the local firewall all show overridden and I was not able to revert the interfaces config to template, it references the virtual router and vr was also overridden. Please help.

  • @muhammadatif2148
    @muhammadatif2148 ปีที่แล้ว

    Hi, can we update interface IP address from panorama , device template?

  • @bsiko1
    @bsiko1 ปีที่แล้ว

    Can we use this method to import security policies in CSV format ??

  • @oleksandrrapp4957
    @oleksandrrapp4957 ปีที่แล้ว

    Hi. Thank you for your video. Can we use these certificates for pre-logon authentication?

  • @ronaldo23425
    @ronaldo23425 ปีที่แล้ว

    Great video, just curious, what’s the purpose of the “clear marked sessions” step you did just before downloading the pcaps? What’s the harm in not doing this step? Just curious, thanks!!

  • @AISynthar
    @AISynthar ปีที่แล้ว

    Can someone point me in the right direction to Disable Certificate prompt during GlobalProtect login for certificate confirmation through Intune. I need to automatically accept the certificate for my users. Thanks

  • @bigbos779
    @bigbos779 ปีที่แล้ว

    Just found your channel and already subscribe :) Almost of your video are very helpful. Thanks