Accessing your Palo Alto virtual firewall(vsys)
Accessing your Palo Alto Virtual will always be done via https://panorama.net.wisc.edu. This is just the front end and does not provide any firewalling capabilities. You have to change to the actual chassis doing the firewalling in order to view your firewall logs and/or policies.
Log into your Palo Alto virtual firewall via https://panorama.net.wisc.edu and enter your NetID and password. On Jan. 28th, 2020 @ 10AM, Duo-MFA will be enabled.
Change your Access Domain 1st. If this it not set correctly, you will not see the correct devices your virtual firewall lives on.
Change the context to point to the Hardware firewall where your virtual firewall lives on.
View firewall logs
You'll be presented with a 2nd factor authentication that looks something like this.
At this point you’ll either look at your DUO token or DUO phone app to get the 6 digit passcode.
If you prefer a DUO push, type “1” and hit the “Enter” key, a DUO push will be sent to your phone for you to accept or deny.
Some folks are not DUO eligible per IAM and HR. If you find you are not DUO eligible and need access to a Campus Firewall, please create a HelpDesk ticket asking Network Services to add you to the DUO eligible group.
Change your Access Domain 1st. If this it not set correctly, you will not see the correct devices your virtual firewall lives on.
Change the context to point to the Hardware firewall where your virtual firewall lives on.
View firewall logs