Skip to main content
PacketMentor logo
Book free
Open menu
Home
Training
Cisco Mentorship
CCNACCNPCCNA AutomationCCNA Cybersecurity
CompTIA Foundation
Network+
Firewall Security
NSE 4PAN Cybersecurity PractitionerPAN Network Security Analyst
Short Courses
Python for Network EngineersAI for Network OperationsInterview Sprint
More
Custom Training Team Training
All training →
Resources
Libraries
CCNA v1.1 (89) CCNA v2.0 (78) CCNA Automation (57) CCNP (33) Network+ (77) NSE 4 (45) Security (36) All topics →
Practice
🎯 Lab Tasks, graded challenges ▶ Videos 📦 Packet Tracer Labs 🎛 Simulators All practice resources →
Live LabMock ExamPricing
Contact 📞 Call us (US direct) ✉️ info@packetmentor.com Login Book your free session now
Free-play Palo Alto · PAN-OS 11.1 Beta, direct URL only

Free-play Palo Alto PAN-OS console

A live in-browser Palo Alto Networks PAN-OS CLI. Enter configure, set interfaces / zones / security rules using the classic set syntax, and commit to activate them. Candidate-vs-running semantics work exactly as they do on a real firewall.

Independent educational training. Not affiliated with or endorsed by Palo Alto Networks, Inc. Palo Alto Networks® and PAN-OS® are trademarks of Palo Alto Networks.

PA-FW-01 · PAN-OS 11.1

Type configure then ? to explore. Every set mutates CANDIDATE. Nothing takes effect until you commit. ↑ / ↓ for history · Tab for completion.

Try this first: a basic zone + interface + policy

  1. configure
  2. set network interface ethernet ethernet1/1 layer3 ip 192.168.1.1/24
  3. set network interface ethernet ethernet1/2 layer3 ip 10.0.0.1/24
  4. set zone trust network layer3 ethernet1/1
  5. set zone untrust network layer3 ethernet1/2
  6. set rulebase security rules allow-web from trust to untrust source any destination any application web-browsing action allow
  7. show config diff
  8. commit
  9. exit, then show config running

Try this: edit context navigation

  1. configure
  2. edit rulebase security rules allow-dns
  3. set from trust
  4. set to untrust
  5. set application dns
  6. set action allow
  7. show. See the subtree at your edit position
  8. top, then show, full candidate
  9. commit

Currently supported (v1)

Operational mode (show system info, show interface all, show session all, show admins, show config running, ping host, traceroute host) · Config mode (configure, exit, edit, up, top, set, delete, show, show config running|candidate|diff, commit, discard) · Candidate vs running semantics with per-command change counter · Bracketed list values ([ A B C ]) · Tab completion for top-level verbs · ? context help · --More-- pager · command history.

Not yet: schema-aware deep-path tab completion · commit validation · multi-vsys · Panorama layering · RBAC. Coming in later releases.

Stuck on a lab, or not sure what to practice next?

Talk it through with a mentor on a free 20-minute call. We look at your lab, your exam date and your weak spots, and you leave with a plan.

Book free session