1. Create User Account on Palo Alto Networks support portal. We suggest that the first account be a generic (fireawalladmins@example.com). You can then create individual accounts for yourself and your team.
2. Register the firewalls on the support portal.
3. Activate the Authorisation Codes for physical or virtual devices on the support portal.
4. Get the management interfaces of the firewalls connected to the network so they can get internet access.(At least up to Step 5).
5. Update PAN-OS to an appropraite version..

Disable ZTP with the following command (it will reboot the appliance)

set system ztp disable

Default login for Palo Alto Networks appliances is admin/admin. You can change the password using the following command

set password

To configure the management IP, use the following

configure

set deviceconfig system ip-address <IP OF MGT INTERFACE> netmask <SUBNET MASK OF MGT INTERFACE> default-gateway <IP OF GATEWAY> dns-setting servers primary <IP OF DNS SERVER>

In PAN-OS 8.0+ you may also need to run the following command to make the MGT interface use static addressing rather than DHCP

set deviceconfig system type static

commit