How to Allow Certain IP Addresses on the Management Interface

Overview

The following document describes how to allow certain IP addresses to access the Management Interface on the Palo Alto Networks firewall.

Steps

From the WebGUI:

1. Go to Device > Setup > Management tab
2. Click on edit icon inside the Management Interface window:
   
3. Add the IP address or network address along with the subnet mask.
   
4. Commit the changes.

From the CLI:

> config

# set deviceconfig system permitted-ip <ipaddress/netmask>

# commit

owner: tgupta