MB Tech Talker
MB Tech Talker
  • 39
  • 262 581
Panorama Templates and Template Stacks
In this video, I want to show you how I configure PAN-OS firewalls in Panorama using Templates and Template Stacks
Check out my blog at www.mbtechtalker.com
Templates and Template Stacks
docs.paloaltonetworks.com/panorama/10-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks
Watch these videos next!
🎥 How to migrate a High Availability pair of PAN-OS firewalls into Panorama - th-cam.com/video/MPlU2Crcd4c/w-d-xo.html
🎥 Panorama Baseline High Availability Configuration - th-cam.com/video/1nhpzJ2ehhQ/w-d-xo.html
🎥 Deploying a PAN-OS Panorama KVM image in EVE-NG - th-cam.com/video/9J9qgaSqcxc/w-d-xo.html
🎥 - Home lab - Cisco UCS EVE-NG lab Server Setup - th-cam.com/video/t_B6wRkbk9s/w-d-xo.html
🎥 Home Lab - Cisco UCS C240 M4 hardware walkthrough - th-cam.com/video/oOuMRz8MJfQ/w-d-xo.html
🎥 Palo Alto firewall lab using VMware Workstation - th-cam.com/video/fEz-5vzkCNk/w-d-xo.html
🎥 GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6 - th-cam.com/video/tIZ9GY2yATc/w-d-xo.html
🎥 - How to Configure Automatic User Certificate Enrolment in Windows Server 2016 / 2019 - th-cam.com/video/veEVjYTpub4/w-d-xo.html
🎥 GlobalProtect Pre-logon using a machine certificate - PAN-OS 10.0.6 th-cam.com/video/mWE_liNOnM4/w-d-xo.html
🎥 How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019 - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html
🎥 How to Install Microsoft Certificate Services - th-cam.com/video/58WQIu0VUTw/w-d-xo.html
🎥 How to configure Palo Alto Firewall Signature Based Security Profiles in PAN-OS 9.1- th-cam.com/video/vTNS88UT8Vc/w-d-xo.html
🎥 Palo Alto Firewall Active-Passive HA VMware Workstation Lab- th-cam.com/video/Pn8JcO6iAP8/w-d-xo.html
🎥 User-ID - th-cam.com/video/hBFum5k7LWE/w-d-xo.html
🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html
Subscribe for more:
th-cam.com/users/MBTechTalker
Share this video with a friend:
th-cam.com/video/OmY3WYNJkgw/w-d-xo.html
🎥 Watch next
How To Configure A Certificate For Secure PAN-OS Web GUI Access
th-cam.com/video/7qXcb3IT664/w-d-xo.html
🐦 Twitter - @mbtechtalker
🌐. Blog - www.mbtechtalker.com
☕. buymeacoffee.com/mbtechtalker
มุมมอง: 6 137

วีดีโอ

Home Lab - Cisco UCS C240 M4 - NVME M2 SSD upgrade
มุมมอง 3.6Kปีที่แล้ว
Just a short video, showing an NMVE.M2 SSD upgrade to my UCS C240 M4 lab server to resolve performance issues whilst working in EVE-NG labs using Palo Alto Network Panorama and PAN-OS firewalls. Hardware used: NVMe PCIe M.2 Adapter and M.2 SATA Adapter www.amazon.co.uk/gp/product/B07GDFX3YJ/ref=ppx_yo_dt_b_asin_title_o07_s00?ie=UTF8&psc=1 Samsung 970 EVO Plus 1 TB PCIe NVMe M.2 www.amazon.co.uk...
How to migrate a High Availability pair of PAN-OS firewalls into Panorama
มุมมอง 14K2 ปีที่แล้ว
In this video, I want to show you how I migrate a HA pair of PAN-OS firewalls into Panorama inside my EVE-NG lab. Check out my blog which compliments this video where I provide a step-by-step tutorial. Migrate a Firewall HA Pair to Panorama Management docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-t...
Panorama Best Practices Assessment
มุมมอง 1.4K2 ปีที่แล้ว
In this video, I want to show you how I run a Palo Alto Networks Best Practices Assessment (BPA) against a Panorama configuration inside my EVE-NG lab. Check out my blog which compliments this Palo Alto Networks Best Practices Assessment video where I provide a step-by-step tutorial. Best Practice Assessment for NGFW and Panorama www.paloaltonetworks.com/services/bpa Watch these videos next! 🎥 ...
Virtual Panorama Log Collector Setup
มุมมอง 5K2 ปีที่แล้ว
In this video, I wanted to show you how I configure a Palo Alto Networks Virtual Panorama log collector inside my EVE-NG lab. Check out my blog which compliments this panorama log collector setup video where I provide a step-by-step tutorial. Panorama Administrator guide docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-appliance/set-up-the-panor...
Panorama Baseline High Availability Configuration
มุมมอง 2.2K2 ปีที่แล้ว
In this video, I wanted to show you how I configure a Palo Alto Networks Panorama with a Baseline High Availability Configuration inside my EVE-NG lab. Check out my blog which compliments this video at www.mbtechtalker.com/panorama-baseline-configuration where I provide a step-by-step tutorial. Panorama High Availability - Panorama Administrator guide docs.paloaltonetworks.com/panorama/10-1/pan...
Deploying a PAN-OS Panorama KVM image in EVE NG
มุมมอง 4.2K2 ปีที่แล้ว
In this video, In this video, I wanted to show you how I deploy a Panorama KVM qcow2 image into my EVE-NG lab. Check out my blog which compliments this video at www.mbtechtalker.com/deploying-panorama where I provide a step-by-step tutorial. Set up a Panorama Virtual Appliance in Panorama Mode docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/set-up-the-panorama-virtual-app...
Home lab - Cisco UCS C240 M4 EVE-NG lab Server Setup
มุมมอง 3.1K2 ปีที่แล้ว
In this video, I provide an update on my Cisco UCS lab server setup, explain how I use TP-Link Tapo P110 wifi smart plugs, and show the specific VMware ESXi 7.0 settings I used to install EVE-NG Pro. Check out my blog at www.mbtechtalker.com. Watch these videos next! 🎥 Home Lab - Cisco UCS C240 M4 hardware walkthrough - th-cam.com/video/oOuMRz8MJfQ/w-d-xo.html 🎥 Palo Alto firewall lab using VMw...
Home lab - Cisco UCS C240 M4 hardware walkthrough
มุมมอง 10K2 ปีที่แล้ว
In this video, I walk through the Cisco UCS C240 M4 hardware that I purchased for my home ESXi lab. It also includes a brief demonstration of the Cisco Integrated Management Console (CIMC) functionality. Check out my new blog - www.mbtechtalker.com Watch these videos next! 🎥 Home lab - Cisco UCS EVE-NG lab Server Setup - th-cam.com/video/t_B6wRkbk9s/w-d-xo.html 🎥 Palo Alto firewall lab using VM...
GlobalProtect Client Certificate Authentication- PAN-OS 10.0.6
มุมมอง 12K2 ปีที่แล้ว
In the video, I will show you how I configure GlobalProtect to use Client Certificate Authentication on a VM-Series Palo Alto NGFW running PAN-OS 10.0.6. Make sure you check out my "How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019" so that you have a machine certificate in place. - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html Check out my new blog - www.mbtec...
How to Configure Automatic User Certificate Enrolment in Windows Server 2016/2019
มุมมอง 3.9K2 ปีที่แล้ว
How to Configure Automatic User Certificate Enrolment in Windows Server 2016 / 2019 Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to install Microsoft Certificate Services on Windows Server - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html 🎥 How To Configure A Certificate For Secure PAN-OS Web GUI...
GlobalProtect Pre-logon using a machine certificate - PAN-OS 10.0.6
มุมมอง 15K2 ปีที่แล้ว
In the video, I show you how I configure GlobalProtect Pre-logon using a machine certificate on a VM-Series Palo Alto NGFW running PAN-OS 10.0.6. Make sure you check out my "How to Configure Automatic Computer Certificate Enrollment in Windows Server 2016 / 2019" so that you have a machine certificate in place. - th-cam.com/video/qhy0QdmcHMA/w-d-xo.html Check out my new blog - www.mbtechtalker....
How to Configure Automatic Computer Certificate Enrolment in Windows Server 2016 / 2019
มุมมอง 6K2 ปีที่แล้ว
How to Configure Automatic Computer Certificate Enrollment in WIndows Server 2016 / 2019 Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to install Microsoft Certificate Services on Windows Server - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥 SSL Forward Proxy decryption - th-cam.com/video/i8da6l4o7pM/w-d-xo.html 🎥 How To Configure A Certificate For Secure PAN-OS We...
GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6
มุมมอง 21K2 ปีที่แล้ว
GlobalProtect Portal & Gateway Configuration PAN-OS 10.0.6 In the Video, I configure a GlobalProtect Portal and Gateway on a VM-Series Palo Alto NGFW on PAN-OS 10.0.6. I will be using this lab setup as a baseline configuration for up-and-coming GlobalProtect videos. Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to Install Microsoft Certificate Services - th-cam.c...
How To Configure A Certificate For Secure PAN-OS Web GUI Access
มุมมอง 9K2 ปีที่แล้ว
How To Configure A Certificate For Secure PAN-OS Web GUI Access Check out my new blog - www.mbtechtalker.com Watch these videos first!! 🎥 How to Install Microsoft Certificate Services - th-cam.com/video/58WQIu0VUTw/w-d-xo.html 🎥. Palo Alto firewall lab using VMware Workstation - th-cam.com/video/fEz-5vzkCNk/w-d-xo.html 🎥. How to configure Palo Alto Firewall Signature Based Security Profiles in ...
How to Install Microsoft Certificate Services
มุมมอง 1.2K2 ปีที่แล้ว
How to Install Microsoft Certificate Services
How to configure DNS Sinkhole on Palo Alto Networks Firewall PAN-OS 9.1
มุมมอง 4.8K2 ปีที่แล้ว
How to configure DNS Sinkhole on Palo Alto Networks Firewall PAN-OS 9.1
How to take Packet Captures on a Palo Alto Networks Firewall
มุมมอง 6K3 ปีที่แล้ว
How to take Packet Captures on a Palo Alto Networks Firewall
How to automatically import address objects into Palo Alto Networks Firewall
มุมมอง 9K3 ปีที่แล้ว
How to automatically import address objects into Palo Alto Networks Firewall
How to configure Data Filtering on Palo Alto Networks Firewall PAN-OS 9.1
มุมมอง 3.5K3 ปีที่แล้ว
How to configure Data Filtering on Palo Alto Networks Firewall PAN-OS 9.1
How to configure File Blocking on a Palo Alto Networks Firewall | PAN-OS 9.1
มุมมอง 4K3 ปีที่แล้ว
How to configure File Blocking on a Palo Alto Networks Firewall | PAN-OS 9.1
How to configure URL Filtering on a Palo Alto Networks Firewall | PAN-OS 9.1
มุมมอง 13K3 ปีที่แล้ว
How to configure URL Filtering on a Palo Alto Networks Firewall | PAN-OS 9.1
How to configure Palo Alto Networks Wildfire Analysis | PAN-OS 9.1
มุมมอง 3K3 ปีที่แล้ว
How to configure Palo Alto Networks Wildfire Analysis | PAN-OS 9.1
Palo Alto Firewall Signature Based Security Profiles | PAN-OS 9.1
มุมมอง 1.9K3 ปีที่แล้ว
Palo Alto Firewall Signature Based Security Profiles | PAN-OS 9.1
How to schedule PAN-OS Dynamic Updates
มุมมอง 5353 ปีที่แล้ว
How to schedule PAN-OS Dynamic Updates
PAN-OS upgrade lab
มุมมอง 3.1K3 ปีที่แล้ว
PAN-OS upgrade lab
Palo Alto NGFW Firewall Custom Response Pages lab using VMware Workstation
มุมมอง 4.7K3 ปีที่แล้ว
Palo Alto NGFW Firewall Custom Response Pages lab using VMware Workstation
Palo Alto NGFW SSL Forward Proxy Decryption & AD Certificate Services CSR on VMware Workstation
มุมมอง 4.8K3 ปีที่แล้ว
Palo Alto NGFW SSL Forward Proxy Decryption & AD Certificate Services CSR on VMware Workstation
Palo Alto Firewall App-ID lab on VMware Workstation
มุมมอง 8003 ปีที่แล้ว
Palo Alto Firewall App-ID lab on VMware Workstation
Palo Alto Firewall Windows User-ID Agent Lab using VMware Workstation
มุมมอง 12K4 ปีที่แล้ว
Palo Alto Firewall Windows User-ID Agent Lab using VMware Workstation

ความคิดเห็น

  • @benedictagyemang3862
    @benedictagyemang3862 หลายเดือนก่อน

    Very great training, thanks very much as you have save me a lot of time going through the docs.

  • @kohers
    @kohers หลายเดือนก่อน

    this is no longer available on github - it was replaced with a "go" based solution, as far as I could find

  • @FatalSkeptic
    @FatalSkeptic หลายเดือนก่อน

    so where's the part on actually installing the drive?

  • @FatalSkeptic
    @FatalSkeptic หลายเดือนก่อน

    Hey, 2 years later, how's this thing going? I have an opportunity to get 1 of these.

  • @stevenramesh3225
    @stevenramesh3225 หลายเดือนก่อน

    Hi the method doesn’t work in our environment can advise if there’s any ways to help resolve the issue? I am to port the objects address groups to palo alto panorama from checkpoint.

  • @irvingsanchez4258
    @irvingsanchez4258 2 หลายเดือนก่อน

    Thanks for this helpful tutorial! Time to get down to work and practice!" If anyone needs the image, I used the following. It works for me!" drive.usercontent.google.com/download?id=1eZs3aUmFTzner_gX4YgbjXyOokhH3MbK&export=download&authuser=0

  • @joe618
    @joe618 2 หลายเดือนก่อน

    Thanks for sharing. I hope there will be more teachings.

  • @TheKamaladmire1
    @TheKamaladmire1 2 หลายเดือนก่อน

    this is absolutely amazing ( simple and straight forward)

  • @robertoospina10
    @robertoospina10 3 หลายเดือนก่อน

    Excellent guide. and the background tunes are great too!

  • @BahodirAlimovv
    @BahodirAlimovv 3 หลายเดือนก่อน

    Is there way to bulk upload security policies and NAT rules using this tool ?

    • @kohers
      @kohers หลายเดือนก่อน

      I think for that you need to export the running config and add those new rules then import the config again with the changes - don't forget to "commit" after the load ofc

  • @oleksandrkotov1474
    @oleksandrkotov1474 4 หลายเดือนก่อน

    Thank you!

  • @batuhanbatuhan6445
    @batuhanbatuhan6445 4 หลายเดือนก่อน

    what do you need it for?

  • @ryanbuster4626
    @ryanbuster4626 4 หลายเดือนก่อน

    Well these override my fan policy and its set to high power as CIMC sees it as a foreign card. Bullshit lol. Thinking of trying a HHHL pcie ssd but I have no idea what models are supported and wont cause the fans to spin crazy loud.

  • @fidisiledif
    @fidisiledif 4 หลายเดือนก่อน

    If I have HA Palo Alto , how to set secure access Web GUI using self sign SSL ? Since I try still not solved

  • @user-fs8zf8eq7m
    @user-fs8zf8eq7m 5 หลายเดือนก่อน

    I get PA-HDF login, it is not changing, what is the minimum memory and HDD requirement to install Palo on VMware workstation

  • @RishiRap
    @RishiRap 5 หลายเดือนก่อน

    You seriously need to change the resolution in your videos to make it a little bigger to be able to be seen/viewed clearly. Such a small font size, Already having a headache trying watching your HIGH resolution video with so small font size.

  • @akilgolandaz2486
    @akilgolandaz2486 6 หลายเดือนก่อน

    Is it possible to get the Palo Alto logs in Panorama without managing Palo Alto from Panorama. If yes please suggest the procedure, as I have already tried but not getting any success. I know is not a good practice but there is an exceptional request

  • @LanternDevilYT
    @LanternDevilYT 6 หลายเดือนก่อน

    Hi MB Tech, Is it possible to use PAN OS integrated userID agent for OpenLDAP server on windows server OS 2022…? If yes, under server monitoring tab. Which type should I choose… Microsoft Active Directory, Microsoft Exchange, Novell eDirectory, Syslog Sender. Nor should I use windows integrated User-ID agent..? Please help me in this.

  • @popescusilviu9948
    @popescusilviu9948 6 หลายเดือนก่อน

    fantastic content

  • @shamsugrace
    @shamsugrace 6 หลายเดือนก่อน

    How to migrate Active-Active HA Pair?

  • @hystrixlignum8983
    @hystrixlignum8983 6 หลายเดือนก่อน

    Hey, this was very helpful in doing this next week for our environmment.

  • @naddu55
    @naddu55 7 หลายเดือนก่อน

    Hi, Excellent Video...how can i get panorama image...please guide i am student and learning PAN-OS 10

  • @muhammadatif2148
    @muhammadatif2148 8 หลายเดือนก่อน

    Hi thanks for video, can we apply changes (IP changes or route addition) in Template stack instead of selecting device template?

  • @suganthik3202
    @suganthik3202 8 หลายเดือนก่อน

    Hi, a very detailed one...useful too..can you explain us or share any assessment doc for the firewalls as well

  • @popescusilviu9948
    @popescusilviu9948 8 หลายเดือนก่อน

    This is a great feature! I did not know about it. Loving your panorama videos. Absolute gold

  • @popescusilviu9948
    @popescusilviu9948 8 หลายเดือนก่อน

    Thank you so much for your work!

  • @ryand7242
    @ryand7242 8 หลายเดือนก่อน

    I just strugglebussed trying to get this to work for hours. Your video got it done in 15 mins. thanks man.

  • @blahblah4634867
    @blahblah4634867 8 หลายเดือนก่อน

    Whenever I set up the PA VM on VMWare it says the Firewall tried to activate promiscuous mode on the two custom interfaces but was blocked. Is this required?

  • @sachinwarad10
    @sachinwarad10 8 หลายเดือนก่อน

    Great Video. So So much better than online document. Thanks for this. 1 Query while creating Cert Profile you selected Root CA, instead of this can I use my Local Enterprise Root CA & Intermediate CA? Bcoz machine & user cert are signed using Local Enterprise CA?

  • @akhilbhattar1226
    @akhilbhattar1226 8 หลายเดือนก่อน

    After following this procedure, my device group was fine but the template values in the local firewall all show overridden and I was not able to revert the interfaces config to template, it references the virtual router and vr was also overridden. Please help.

  • @muhammadatif2148
    @muhammadatif2148 9 หลายเดือนก่อน

    Hi, can we update interface IP address from panorama , device template?

  • @bsiko1
    @bsiko1 9 หลายเดือนก่อน

    Can we use this method to import security policies in CSV format ??

  • @oleksandrrapp4957
    @oleksandrrapp4957 9 หลายเดือนก่อน

    Hi. Thank you for your video. Can we use these certificates for pre-logon authentication?

  • @ronaldo23425
    @ronaldo23425 10 หลายเดือนก่อน

    Great video, just curious, what’s the purpose of the “clear marked sessions” step you did just before downloading the pcaps? What’s the harm in not doing this step? Just curious, thanks!!

  • @AISynthar
    @AISynthar 10 หลายเดือนก่อน

    Can someone point me in the right direction to Disable Certificate prompt during GlobalProtect login for certificate confirmation through Intune. I need to automatically accept the certificate for my users. Thanks

  • @bigbos779
    @bigbos779 11 หลายเดือนก่อน

    Just found your channel and already subscribe :) Almost of your video are very helpful. Thanks

  • @micheleklau2387
    @micheleklau2387 11 หลายเดือนก่อน

    Good video, but packet captures on a Palo Alto are an absolute PITA compared to the straight forward tcpdump and fwmonitor on Checkpoints.

  • @user-qu3hc9kt6i
    @user-qu3hc9kt6i ปีที่แล้ว

    Please also ask how to set the log colltector ha while the panorama is redundant.

  • @user-qu3hc9kt6i
    @user-qu3hc9kt6i ปีที่แล้ว

    How does the log disk work in a Panorama Redundant HA state? Please also ask how to sync by setting each log disk. Are the logs visible in the active panorama also visible in the passive panorama?

  • @djangosmissingfingers
    @djangosmissingfingers ปีที่แล้ว

    So even though the devices are in HA and everything is syncing, you still want to manually put both devices into the same device group / template stack?

  • @losecontroltv9536
    @losecontroltv9536 ปีที่แล้ว

    smashed the like button, sweet video. If we are importing HA FWs with multiple virtual systems, is it the same steps? Import one vsys and then the second one?

  • @kaikenxk
    @kaikenxk ปีที่แล้ว

    Have you installed another m.2 in that same adapter, does the server see both?

  • @Sri-vk7gx
    @Sri-vk7gx ปีที่แล้ว

    Hi Matt, This is Pure GOLD!! In production networks, most probably, we'd import an firewall/pair of firewalls into the running Panorama which would have already objects configured in it. Can you please post an video on how to fix the duplicate or overlapping IP address issue?

  • @jaydipparmar5653
    @jaydipparmar5653 ปีที่แล้ว

    Can you help with Panorama image for eve-ng?

  • @MasterinMitigation
    @MasterinMitigation ปีที่แล้ว

    I want to want which deployment mode is suitable in a PRP (Parallel Redundant Network). I am currenting designing a network, where there is separate 2 LANs i-e LAN A and LAN B. and I am placing a firewall in both LANs. I am wondering is the HA configuration provide a cross connection or junction, which will disturb the PRP communication.

  • @FaridPangos
    @FaridPangos ปีที่แล้ว

    What about if you wan to manage the firewall through the non-management interfaces ? like ethernert1/1. how do you attach the ssl service profile to the non-management interface?

    • @skra11
      @skra11 9 หลายเดือนก่อน

      The IP address of the management interface will be different than the routed interface. You can probably use subject alternative name in the same cert to include other interfaces.

  • @gpietroforte
    @gpietroforte ปีที่แล้ว

    Thank you for the step by step.

  • @dpupktq512
    @dpupktq512 ปีที่แล้ว

    I bought this exact same server because I found a great deal. The one I purchased came with 256 GB RAM and 7x Intel 1.6TB SSD DC S3510 SATA and 1x 800GB SAS SSD, 2x Xeon E5-2690 v4 2.60 GHz, 2x PSU...My objective is to setup a backup storage for my files that I can access from anywhere. Although I have a pretty capable hardware, I do not possess the knowhow on how to achieve my goal. I will appreciate if someone can point me in the right direction to some sort of guide that would help me set this up and achieve my goal. Thanks!

  • @marcocoronado1698
    @marcocoronado1698 ปีที่แล้ว

    Hello in panorama mode, according to what is indicated in its official page it requires 16 vCPU, 32 GB of RAM and 2TB of disk. How did you build your virtual image. Do you have those resources indicated?

  • @ronaldo23425
    @ronaldo23425 ปีที่แล้ว

    THANK YOU!!! I got it working entirely due to this video, thank you so much!