Accessing your Palo Alto virtual firewall(vsys)

Accessing your Palo Alto Virtual will always be done via https://panorama.net.wisc.edu. This is just the front end and does not provide any firewalling capabilities. You have to change to the actual chassis doing the firewalling in order to view your firewall logs and/or policies.

Log into your Palo Alto virtual firewall via https://panorama.net.wisc.edu and enter your NetID and password.  On Jan. 28th, 2020 @ 10AM, Duo-MFA will be enabled.
You'll be presented with a 2nd factor authentication that looks something like this.
DUO-MFA Panorama Login Page
At this point you’ll either look at your DUO token or DUO phone app to get the 6 digit passcode. 
If you prefer a DUO push, type “1” and hit the “Enter” key, a DUO push will be sent to your phone for you to accept or deny.


Change your Access Domain 1st.  If this it not set correctly, you will not see the correct devices your virtual firewall lives on.
Access_Domain




Change the context to point to the Hardware firewall where your virtual firewall lives on.
Change_Context



View firewall logs
Monitor_Tab








Keywords:view Palo Alto virtual firewall logs rule vsys panorama access monitor PA admin   Doc ID:76602
Owner:Scott B.Group:Network Services
Created:2017-09-18 08:38 CSTUpdated:2020-01-17 11:44 CST
Sites:DoIT Help Desk, DoIT Staff, Network Services
Feedback:  0   3