! PermitANY — Palo Alto PAN-OS Base / Day-0 Config
! Day-zero configuration for Palo Alto Networks firewalls: hostname, management interface, DNS, NTP, admin users, and basic system settings via CLI set commands.
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
# Palo Alto PAN-OS Base Configuration
# Apply via CLI: copy/paste in configuration mode
#
set deviceconfig system hostname PA-FW-01

set deviceconfig system domain corp.example.com

set deviceconfig system ip-address 10.0.0.10
set deviceconfig system netmask 255.255.255.0
set deviceconfig system default-gateway 10.0.0.1
set deviceconfig system dns-setting servers primary 8.8.8.8
set deviceconfig system dns-setting servers secondary 8.8.4.4
set deviceconfig system ntp-servers primary-ntp-server server 0.pool.ntp.org
set deviceconfig system ntp-servers secondary-ntp-server server 1.pool.ntp.org
set deviceconfig system timezone US/Eastern
#
# Admin Users
set mgt-config users admin password Admin@2024!
set mgt-config users admin permissions role-based superuser yes

set mgt-config users readonly-user password Pass@2024!
set mgt-config users readonly-user permissions role-based devicereader yes

#
# Management Services
set deviceconfig system service disable-telnet yes
set deviceconfig system service disable-http yes
set deviceconfig system service disable-icmp no

set deviceconfig system login-banner "AUTHORIZED ACCESS ONLY."

#

# Panorama
set deviceconfig system panorama-server 10.0.0.200

#

# Syslog
set shared log-settings syslog SYSLOG-SRV server 10.0.0.201 server 10.0.0.201
set shared log-settings syslog SYSLOG-SRV server 10.0.0.201 transport UDP
set shared log-settings syslog SYSLOG-SRV server 10.0.0.201 port 514
set shared log-settings syslog SYSLOG-SRV server 10.0.0.201 facility LOG_USER

#
# Commit
commit