How to disable ztp on a ztp firewall

• Palo Alto Firewall
• PAN-OS 9.1 and above
• ZTP (Zero Touch Provisioning).

1. Access ztp firewall via console then run the disable command based on your Device Model
   1. For PA-220-ZTP, PA-220R-ZTP, PA-800-ZTP, PA-850-ZTP, PA-3220-ZTP, PA-3250-ZTP, and PA-3260-ZTP only

   2. > request disable-ztp

   3. For PA-5400, PA-400, PA-410, PA-1400, and PA-3400 only.

   4. > set system ztp disable

2. Configure the management interface and default gateway:

> configure
# set deviceconfig system ip-address <ip address> netmask <netmask> default-gateway <default gateway> dns-setting servers primary <DNS ip address>
# commit

3. Issue the following commands:

> set system setting template enable
> set system setting template disable
> set system setting shared-policy enable
> set system setting shared-policy disable

4. Access your FW User Interface and configure a network interface a dataplane default-gateway and a zone tied up to that interface.
5. From CLI perform a commit force.

# commit force