====== Initial Setup ======


  - [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNPCA0|Create User Account]] on Palo Alto Networks support portal. We suggest that the first account be a generic (fireawalladmins@example.com). You can then create individual accounts for yourself and your team.
  - [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNfCAK|Register the firewalls on the support portal]].
  - Activate the Authorisation Codes for [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNACA0|physical]] or [[https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNhCAK|virtual]] devices on the support portal.
  - [[https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/getting-started/integrate-the-firewall-into-your-management-network/perform-initial-configuration.html|Get the management interfaces]] of the firewalls connected to the network so they can get internet access.(At least up to Step 5).
  - [[https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/software-and-content-updates/pan-os-software-updates.html|Update PAN-OS to an appropraite version.]].

Disable ZTP with the following command (it will reboot the appliance)
<code>set system ztp disable</code>
Default login for Palo Alto Networks appliances is ''admin''/''admin''. You can change the password using the following command
<code>set password</code>

To configure the management IP, use the following
<code>configure</code>
<code>set deviceconfig system ip-address <IP OF MGT INTERFACE> netmask <SUBNET MASK OF MGT INTERFACE> default-gateway <IP OF GATEWAY> dns-setting servers primary <IP OF DNS SERVER></code>
In PAN-OS 8.0+ you may also need to run the following command to make the MGT interface use static addressing rather than DHCP
<code>set deviceconfig system type static</code>
<code>commit</code>