Palo Alto High Availability Lab

Solution Overview

WWT's Palo Alto High Availability Lab exists to provide a unified solution built around relevant use cases. It seeks to showcase an architecture that solves the business problems our customers are currently facing, including encrypted traffic visibility, application control, user identification, cyber-attack defense and use of threat intelligence.

This lab consists of 2 Palo Alto firewalls and several servers running Splunk, Panorama, Expedition and Minemeld, as well as a number of user workstations. The firewall is configured to show functionality. In addition, Splunk is used to show how Palo Alto data exports can be used to create valuable insights. You will access the environment using a Windows-based jump host from which you can browse web consoles, open RDP/SSH sessions, etc.

Goals & Objectives

This on-demand lab provides a safe environment to evaluate the functionality of Palo Alto Networks on various Windows and Linux endpoints. This is the best starting point for understanding the solution and how it can provide value to your organization.

The lab environment will allow you to:

  • Access the Palo Alto Networks Proving Grounds lab environment.
  • Login to the cloud-based portal.
  • Navigate the portal's interface and workflow.
  • Access several resources to manage and monitor the firewall.

Hardware & Software


  • Palo Alto VM-series firewall
  • Splunk log collector
  • Expedition, Minemeld, and Panorama appliances

Server Devices

  • 1x Windows Jumphost (Windows Server 2016)
  • 1x Splunk Server (CentOS 7)
  • 1x Utility Server (CentOS 7)

Client Devices

  • 1x JumpBox