In this blog, you will learn how to download and add Palo alto firewall image in eve-ng. Palo Alto is a next-generation firewall that provides a lot of Security features. You can add Palo Alto firewall in Eve-NG and create your own lab for testing/education purposes.
There are two methods to add palo alto firewall to eve-ng.
- Deploying Palo alto firewall using KVM .qcow2 image (this is the easiest method to add a firewall in eve-ng)
- Convert your own Palo alto firewall image for eve-ng
List of Supported Images for Eve-ng
| EVE Image Name | Downloaded Filename | Version | vCPUs | vRAM | Console | |
|---|---|---|---|---|---|---|
| 1. | paloalto-7.0.1 | PA-VM-ESX-7.0.1.ova | 7.0.1 | 2 | 4096 | Telnet |
| 2. | paloalto-8.0.1 | PA-VM-KVM-8.0.1.qcow2 | 8.0.1 | 2 | 4096 | Telnet |
Other versions should also be supported following the procedure.
Download Palo Alto Firewall Image for Eveng
Download the Palo Alto Image
http://foxbear.co.in/download/download-palo-alto-paloalto-8-0-1/
Images are not hosted in our server, we are just indexing the link found on the internet.
Deploying Palo Alto firewall to eve-ng using KVM .qcow2 image
1.1. Using our image table, create the correct image folder,
This example is for image 2. in the table above. It is Paloalto 8.0.1 image. Per our image naming table, we have to create an image folder starting with Paloalto-, let’s do it.
mkdir /opt/unetlab/addons/qemu/paloalto-8.0.1/
1.2. Upload the downloaded image to the EVE
/opt/unetlab/addons/qemu/paloalto-8.0.1/ folder using for example FileZilla or WinSCP.
1.3. From the EVE CLI, go to the newly created image folder.
cd /opt/unetlab/addons/qemu/paloalto-8.0.1/
1.4. Rename the original filename to virtioa.qcow2
mv PA-VM-KVM-8.0.1.qcow2 virtioa.qcow2
1.5. Fix permissions:
/opt/unetlab/wrappers/unl_wrapper -a fixpermissions
The default username is admin with password admin.
Method, converting your own Palo Alto image for eve-ng from OVA VMDK disk.
2.1. Create a temporary working directory and upload the downloaded image to the EVE using for example FileZilla or WinSCP. Then login as root using SSH protocol and uncompress it:
mkdir abc cd abc tar xf PA-VM-ESX-7.0.1.ova
2.2. Then convert the disk to the qcow2 format:
/opt/qemu/bin/qemu-img convert -f vmdk -O qcow2 PA-VM-ESX-7.0.1-disk1.vmdk virtioa.qcow2
2.3. Create the folder for HDD image and move it:
mkdir /opt/unetlab/addons/qemu/paloalto-7.0.1 mv virtioa.qcow2 /opt/unetlab/addons/qemu/paloalto-7.0.1
2.4. Delete temporary directory abc and fix permissions:
cd .. rm -rf abc /opt/unetlab/wrappers/unl_wrapper -a fixpermissions
The default username is admin with password admin.
Like what the other person said, wait for about 180 seconds or maybe slightly more.
PA needs time to boot up, and then the auto-commit process takes a few minutes to complete. Only then the default username is configured in the running-config for it to take effect.
Hi guys,
did anyone solve the issue regarding the username/password admin/admin in palo alto?
Thank you in advance.
1.2. Upload the downloaded image to the EVE
/opt/unetlab/addons/qemu/paloalto-8.0.1/ folder using for example FileZilla or WinSCP.
I am lost here .
Please, I need assistance.
I do not mind paying for this.
I can send a zoom link to teach me.
Hi , i tried this image in eve-ng on macbook its not booting up.
same i have tried on window laptop its working .please suggest for macbook M1 .
wait 3 to 4 min its automatically ask username and password then type admin/admin
once the services are started Palo alto accept the default user id and password, after booting please provide some time to palo alto to accept the default user id and password
bro admin/admin is not working
Hi Kunal,
Please try multiple times, we checked internally admin/admin are the credentials
Bro admin/admin work. once you start PV wait for minimum 180 seconds then enter admin admin will work.
Hi, I have to download Panorama qcow2. Please provide me assistance.
Hi, why does the default username and password admin/admin not work? using Palo Alto 8.0
Hey bro, I was stuck in the same failure, but i noticed that at the begining the firewall was asking some different password, bu a couple of minutes after, it asked “PA_VM:”, then admin/admin worked
I have been struggling for a long time with the default password. After a whole live trying, it works with default password. However, when it prompts me to change a new password, it sends a message that disappear immediately, and felt again in the same loop asking for pwd.
Next time, after confirming new password and hitting enter I took a print screen as soon as a hit enter, and I got the policy to type the new password. I can not paste the print screen but this is what it says:
password should be minimum 8 characters long
password should have minimum 1 uppercase, 1 lowercase and 1 number or 1 non-alphanumeric character