Palo Alto PAN-OS Traffic Lab Desktop → Firewall → Server · CLI
Full PAN-OS UI Hub

Lab topology (always visible)

🖥️ Desktop

User PC — browser + cmd
Student initiates traffic here

10.10.10.50 · zone trust

🔥 Palo Alto NGFW

Pre-configured security policy
Live session + traffic logs

eth1/1 10.10.10.1 · eth1/2 203.0.113.1 · eth1/3 10.20.20.1

🌐 Server / Internet

Destination hosts (IP only)
Ping / HTTP response (dummy)

8.8.8.8 · 10.20.20.10 · 142.250.190.14
Path idle — initiate traffic from Desktop (left).

Desktop CLI · 10.10.10.50

ping / curl only
Type ping <ip> or curl http://… / curl https://…. Traffic hits the firewall policy, then live logs update.

Firewall CLI · PAN-OS

All firewall work is CLI. After desktop traffic, run show log traffic last 10 to see the live hit.

Live traffic logs

No student traffic yet. Use Desktop buttons or type ping/curl.
Pre-config rules (examples):
· trust→untrust web/ssl/dns = ALLOW allow-trust-to-untrust
· trust→dmz to 10.20.20.10 web/ssl = ALLOW allow-trust-to-dmz-web
· ping to internet (no icmp rule) = DENY default-deny