Topics Map > Networks & Connectivity

Accessing your Palo Alto virtual firewall(vsys)

Accessing your Palo Alto Virtual will always be done via This is just the front end and does not provide any firewalling capabilities. You have to change to the actual chassis doing the firewalling in order to view your firewall logs and/or policies.
Log into your Palo Alto virtual firewall via and enter your NetID and password.  On Jan. 28th, 2020 @ 10AM, Duo-MFA will be enabled.
You'll be presented with a 2nd factor authentication that looks something like this.
DUO-MFA Panorama Login Page
At this point you’ll either look at your DUO token or DUO phone app to get the 6 digit passcode. 
If you prefer a DUO push, type “1” and hit the “Enter” key, a DUO push will be sent to your phone for you to accept or deny.

Some folks are not DUO eligible per IAM and HR. If you find you are not DUO eligible and need access to a Campus Firewall, please create a HelpDesk ticket asking Network Services to add you to the DUO eligible group.

Change your Access Domain 1st.  If this it not set correctly, you will not see the correct devices your virtual firewall lives on.

Change the context to point to the Hardware firewall where your virtual firewall lives on.

View firewall logs

Keywordsview Palo Alto virtual firewall logs rule vsys panorama access monitor PA admin   Doc ID76602
OwnerScott B.GroupNetwork Services
Created2017-09-18 09:38:15Updated2020-11-04 17:53:54
SitesDoIT Help Desk, DoIT Staff, Network Services
Feedback  0   1