How to add Palo Alto firewall in Eve-NG

In this blog, you will learn how to add Palo alto firewall image in eve-ng. You can download the converted image of Paloalto firewall for eve-ng. Palo Alto is a next-generation firewall that provides a lot of Security features. You can add Palo alto firewall in Eve-NG and create your own lab for testing/education purposes.

There are two methods to add palo alto firewall to eve-ng.

1. Deploying Palo alto firewall using KVM .qcow2 image (this is the easiest method to add firewall in eve-ng)
2. Convert your own Palo alto firewall image for eve-ng

Table of Content

1. Image Supported
2. Download the Palo Alto Image
   https://networkhunt.com/download/download-palo-alto-paloalto-8-0-1/
   Images are not hosted in our server, we are just indexing the link found on the internet.
3. Extract the image
4. upload the folder to Quemu
5. Fix the Permission
6. Open Eve-NG, add PaloAlto Node and enjoy.

	EVE Image Name	Downloaded Filename	Version	vCPUs	vRAM	Console
1.	paloalto-7.0.1	PA-VM-ESX-7.0.1.ova	7.0.1	2	4096	Telnet
2.	paloalto-8.0.1	PA-VM-KVM-8.0.1.qcow2	8.0.1	2	4096	Telnet

Other versions should also be supported following bellow’s procedure.

1. Deploying Palo Alto firewall to eve-ng using KVM .qcow2 image

1.1. Using our image table, create the correct image folder,

This example is for image 2. in the table above. It is Paloalto 8.0.1 image. Per our image naming table, we have to create an image folder starting with Paloalto-, let’s do it.

mkdir /opt/unetlab/addons/qemu/paloalto-8.0.1/

1.2. Upload the downloaded image to the EVE

/opt/unetlab/addons/qemu/paloalto-8.0.1/  folder using for example FileZilla or WinSCP.

1.3. From the EVE CLI, go to the newly created image folder.

cd /opt/unetlab/addons/qemu/paloalto-8.0.1/

1.4. Rename original filename to virtioa.qcow2

mv PA-VM-KVM-8.0.1.qcow2 virtioa.qcow2 

1.5.  Fix permissions:

/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

The default username is admin with password admin.

2. Method, converting your own Palo Alto image for eve-ng from OVA VMDK disk.

2.1. Create temporary working directory and upload the downloaded image to the EVE using for example FileZilla or WinSCP. Then login as root using SSH protocol and uncompress it:

mkdir abc
cd abc
tar xf PA-VM-ESX-7.0.1.ova

2.2. Then convert the disk to the qcow2 format:

/opt/qemu/bin/qemu-img convert -f vmdk -O qcow2 PA-VM-ESX-7.0.1-disk1.vmdk virtioa.qcow2

2.3. Create the folder for HDD image and move it:

mkdir /opt/unetlab/addons/qemu/paloalto-7.0.1
mv virtioa.qcow2 /opt/unetlab/addons/qemu/paloalto-7.0.1

2.4. Delete temporary directory abc and fix permissions:

cd ..
rm -rf abc
/opt/unetlab/wrappers/unl_wrapper -a fixpermissions

The default username is admin with password admin.