Palo Alto Firewall PA-440 Unboxing | Startup | First Time Setup

[@Michael-er8dh]

Hey Keith, another great video! From my CCNA days to CCNP, Fortinet, and now Palo Alto, you carried my whole career!

[@KeithBarker]

Thank you Michael! I have a short Palo Alto playlist for KZbin that I am uploading this week.

[@manassahyoung8218]

@@KeithBarker looks like you're about to carry mines too.

[@Smilin_Chris]

So glad to see you showing PA some love again. Hope that means more PA content in the future!

[@wally19]

woohoo, keith is back

[@saschakruger3576]

I got mine 440 recently and plan to set it up later today. I'm already looking forward to it and that's why I came across your video.

[@KeithBarker]

Thank you @saschakruger3576!

[@dustinclark6078]

Keith! I saw you dropped a CWDP course on CBT. Stoked to see more of your WiFi courses! I used your CCNA course to get my first networking cert and technician job 2 years ago. Fast forward to today I'm an engineer!!

[@jasonme3557]

That's awesome. I am doing the Palo right now. I got my CCNP though Jeremy Chara

[@davidsanders1593]

Same here. Got my CCNA and I'm an engineer as well. I got my PCNSA through Keith's training on CBT Nuggets and now I'm training for my PCNSE.

[@jasonme3557]

@@davidsanders1593 that's great I am new to Palo.. Check point engineer for 12 years. Was the exam difficulted. So far the class is relativity straight forward.

[@davidsanders1593]

@@jasonme3557 There were a few questions that stumped me on the PCNSA but overall it wasn't that bad. As long as you pay attention to Keith's training, you're good to go. Passed on the first attempt.

[@maherterminal1]

Keith, I can't thank you enough. You helped me (and people all around the world) alot over the years. Thank you from the bottom of my heart.

[@raygomez1847]

Thanks for the help Keith!

[@KeithBarker]

Happy to do it, thanks for the feedback @raygomez1847.

[@Alex-un5tl]

glad to know you finally got one!

[@moongloomable]

Wish we could actually buy these used without license issues. Looks like fun. Thanks for sharing.

[@TWX1138]

Their products aren't really geared toward any buyers except for businesses. And even then, you're really best off when you've got a panorama license and are centrally managing your firewalls that you've set up in a repeated configuration model. I'm waiting for the 445 with SFP, but I think they've made a mistake in the design. There are two SFP slots, but one of them is apparently only for the management port. One effectively only has one SFP port. This is frustrating when fiber makes for a wonderful electrical separation from a service provider's equipment to the campus equipment.

[@InfoSecPat]

Nice video again Keith :)

[@KeithBarker]

Thank you InfoSec Pat!

[@IsmailIsmail-nr1mg]

Keith awaiting for Palo Alto more & deep classes

[@jmhm17]

Perfect timing I'm watching your pan series on CBT nuggets

[@felixkasuti325]

Keith doing what he does best can't have enough of your trainings...

[@KeithBarker]

Thank you felix kasuti!

[@FarkhanAliyev]

Great Video. I like PA-400 models. It has cool formfactor and pretty solid specs. Hope you will make a video with PA-CN series!

[@essalhimeriem6239]

Thanks a bunch, I love what you have been doing for a long time, we learned a lots from you..

[@KeithBarker]

My pleasure!

[@ranjanadissanayaka5390]

I will get there eventually.

[@JasonsLabVideos]

Nice video, One day id like to get one of these units too for the lab to play with !!

[@pathlabdotline3368]

Hi Keith , Thanks for this. Could you please bring some content on global protect Palo Alto.

[@bytes86]

love you videos Keith! waiting for more!

[@paulhaley499]

pro-tip, sometimes putty gets weird and highlighting 'admin' and right clicking fixes that for the passwd input

[@KeithBarker]

Thank you @paulhaley499!

[@henrryvilleta9136]

Hi Keith not sure if you mentioned in any of the comment, but do you mind sharing how you ended up getting the Appliance?

[@KeithBarker]

Thank you Henrry Villeta! I bought the lab units through Corporate Armour. They were each priced under 1K US, and the service was great. Had to use a company email address.

[@niraj7616]

I still bust some moves when your intro hits 🤖

[@alexchamorro1884]

gracias por el video , saludos de Lima Perú

[@techsolutions9294]

Excellent Video !!!

[@KeithBarker]

Thank you! Cheers!

[@ohagi881]

Thanks for making this video!!

[@KeithBarker]

My pleasure!

[@KRICHAN_Technologies]

Very cool and fantastic video

[@KeithBarker]

Thank you Koti D!

[@sreejith_jinachandran]

CCNA R&S, CCNP R&S, CCNA Security,CCNP Security, PCNSA, CCSA, F5 BIG IP LTM, VMware VCP, VSphere, ECH CEHv10 everything I studied from you. I'll always owe on you....

[@KeithBarker]

Thank you @sreejithjinachandran7322!

[@RogueDire]

Great video thanks! - with only 8 ports - can the PA-450 be placed at a campus (200 users) and which ports can be used for an HA deployment since there are no dedicated HA ports, thank you

[@KeithBarker]

Thank you for the question Rogue Dire. A PA-450 should easily support 200 users. For the HA interfaces, use any 2 of the gigabit interfaces, specify they are the type "HA" and you are good to go. All the best to you!

[@esj9897]

Keith can you do a video on DR for on prem to a nearby site being hot. I'm not sure how that concept works as far as streaming and failover. If you can shed light that would be awesome!

[@KeithBarker]

Thank you for the question Es J. I am not an expert on that, so I don't have any videos planned for that topic.

[@esj9897]

I guess it's more for server guys. I believe we just provide redundant fiber to the routers for disaster recovery and what ever routing protocol. Thanks!

[@Holgidolgi]

Thanks

[@KeithBarker]

Thank you holgidolgi!

[@davidsanders1593]

Hey Keith. I couldn't help but notice in the CLI that the sw version said 11.0.0 but when you went into the GUI it shows 10.1.3. Is that because the firewall was upgraded to version 11 prior to the GUI being shown in the video? And with that being said, can you show us PanOS 11 in a future video?

[@KeithBarker]

Good eye! I filmed the video, including the box opening and initial setup first. Then I did the upgrade later in the day off camera. After that, I decided to reshoot the initial config. So I did a factory reset, and that is why the configuration is on v 11, but the other portions of the video reflect 10.x. All my videos going forwards at CBT Nuggets will be at version 11.x or better.

[@davidsanders1593]

@@KeithBarker Great to know! I haven't upgraded my customers environments to version 11 yet. I'll be on the lookout for your new CBT Nuggets videos.

[@terrylwilliams]

May I ask where you purchased the device from? Was it new, opened box, used? I want to purchase one for learning, but not too familiar with the product line. change of subject. I enjoy your videos and learn a lot. Wish you would do another/updated structured CCNA course. I just can't into Jeremy from CBTnuggets or Kevin Wallace.

[@KeithBarker]

Thank you Terry Williams! I bought 2 lab units, with licenses, through Corporate Armour.

[@targeting]

Hey Keith, Big fan of you. Was wondering if you had a VR headset and if you've ever heard of vrchat

[@KeithBarker]

Thank you targeting! I use the consumer grade Oculus Quest 2, and have been in VR Chat more than a few times. One of my kids designs avatars and worlds there.

[@manikanthb1853]

Hi Keith, I have home lab but want to access that lab remotely. If you don't mind, could you please suggest me some options?

[@technicallordg6254]

That's nice 🙂

[@KeithBarker]

Thank you @technicallordg6254!

[@aa-sy9hk]

nice video... what kind of marker you used for power supply ?

[@KeithBarker]

Thank you for the question a a. Just a silver sharpie.

[@bulcub]

does the license come with it? or do I have to register device to get/activate license?

[@KeithBarker]

Thank you for the question @bulcub. I purchased PA 440s (2 of them) each with a 1 year lab license, that if I want to use next year will have to renew.

[@PowerUsr1]

Where did you get the lab subscriptions?

[@KeithBarker]

Thank you for the question Michael Moore. I purchased the hardware and the lab license from: www.corporatearmor.com/product/palo-alto-networks-pa-440-next-gen-firewall H/W: PAN-PA-440-LAB 1 Yr License PAN-PA-440-BND-LAB4

[@dosmaiz7361]

How do you guys even purchase a license for home lab use? I see the hardware on ebay, but cant find where to get the license. Thanks.

[@KeithBarker]

I used the company called corporate armor, they were great working with me to get the PA 440 and a one-year lab license.

[@dosmaiz7361]

@KeithBarker contacted them, and they were really nice. But I guess Palo Alto doesn't sell licenses to home users. Boooo

[@KellyMurphy]

I've had a pa440 for a year already

[@aumatto]

I just got mine, plugged it in... only getting amber light on power... looks like maybe a DOA unit?? :/ tried both psu's.. new power cord, samething.. :(

[@KeithBarker]

Did you connect a console cable, and see if there are any messages at the console?

[@chuggernaut23]

What version of securecrt are you using? I would love to confirm what I am pasting before actually pasting. I either have an old version or I haven’t enabled a setting.

[@KeithBarker]

Thank you for the question Cameron C. I am using version 9.3.1

[@chuggernaut23]

@@KeithBarker hmm, must be time for an upgrade. I’m running 6.6.3.

[@Ehelio]

Hi bro can you help me with this Captures of all Protocols I’m not getting enough info on this

[@nevmann]

They went away from their blue color? What are you going to use it for Keith?

[@KeithBarker]

Thank you for the question Alexander Neumann. I am updating our PCNSA and PCNSE content at CBT Nuggets.

[@TesTesfamariam]

@@KeithBarker looking forward for the updated course.

[@jasonme3557]

looks like an old 90's Punch amp.

[@Tadzilla3]

How do you get your SecureCRT to colour the different items like that?

[@KeithBarker]

Thank you for the question Tadija. Using this www.vandyke.com/support/tips/colorconfig.html with the Cisco color scheme forums.vandyke.com/showthread.php?p=49910

[@marka.ashford7059]

How does the PA 440 compare to an NGF fro. Cisco like the Firepower 1010?

[@KeithBarker]

Thank you for the question Mark A. Ashford. There are pros and cons for the NGFWs from Cisco, Fortinet, Palo Alto Networks, and CheckPoint. I find that MOST features are similar. Some integrate better and easier than others. Some are twice as expensive as others. It is a mixed bag.

[@mckeznak]

This kind of rugged box just begs for an integrated LTE/5G modem. It's a pain in a mobile truck to have a second modem to power and store and such.

[@sarbjitsingh4341]

How much is the license cost for the home lab?

[@KeithBarker]

Thank you for the question @sarbjitsingh4341. The 440 with a lab license was around $800 through cooperate armor.

[@maherterminal1]

why is the management CPU at 91%? :D

[@KeithBarker]

The initial boot up and initialization take a bit of CPU.

[@goharhussain7228]

why you give internet on management interface

[@KeithBarker]

Thank you for the question @goharhussain7228. The firewall needs to communicate over the Internet for licensing and updates. It uses the mgmt interface for that.

[@senstart]

CLI shows the software version as 11.0 whereas GUI shows it as 10.1.3😂

[@KeithBarker]

Thank you Senstart! Fantastic eye for detail!!! I began an upgrade, (to 11), then did a factory reset, did the CLI, and the the last part of the video is from before I did the update. Hats off to you!!!

[@trikki69]

Love the demo and instruction but 1Gbps interfaces... it's 2023 my home internet connection is faster than 1Gbps. Surely having a couple of 2.5Gbps would be a good idea? C'mon PaloAlto you can do better than this. :)

[@AdjiFajri]

You can do aggregated port

[@youngceo620]

What equipment do you have at home that can actually utilize 1gb?