Bootstrapping

Question 2

Why are Microsoft Windows and Apple MacOS unable to read the bootstrap USB flash drive?

Answer 2

because the drive is formatted using an ext4 file system; install third-party software or use a Linux system to read the USB drive

Question 3

In what state a firewall has to be in order to be able to bootstrap from a USB flash drive?

Answer 3

firewall must be in a factory default state or must have all private data deleted

Question 4

What is bootstrapping?

Answer 4

feature that enables firewalls to automatically configure themselves during the first boot using a specifically prepared storage volume

Question 5

What are the possible storage volumes for firewalls for bootstrapping?

Answer 5

• USB for physical appliances
• storage accounts for VM-Series firewalls

Question 6

Which exact directories need to be present on the storage from which firewalls is performing a bootstrap, even if the directory is empty?

Answer 6

• /config
• /license
• /software
• /content

Question 7

Which optional direcotry can be included?

Question 8

What does the /config directory include?

Answer 8

• init-cfg.txt
• bootstrap.xml

Question 9

What is the importance of the init-cfg.txt file?

Answer 9

crucial for the basic configuration, including management interface settings, DNS, Panorama settings, etc.

Question 10

What does the bootstrap.xml contain?

Answer 10

complete configuration for the firewall

Question 11

Is bootstrap.xml file optional?

Answer 11

yes

Question 12

How is the bootstrap process for Palo Alto Networks firewalls, including VM-Series firewalls initiated?

Answer 12

only on the first boot when the firewall is in a factory default state

Question 13

How do you bootstrap firewall on a local hypervisor like VMware ESXi, KVM, or Hyper-V?

Answer 13

1. create a disk (either a virtual hard disk or an ISO image) containing the bootstrap package
2. attach to the virtual firewall instance before it is powered on for the first time
3. firewall detects this attached disk during its initial boot sequence and applies the configurations contained within the bootstrap package

Question 14

How do you bootstrap firewall in a cloud environment?

Answer 14

specify the location of the bootstrap package stored in cloud storage during the deployment of the VM-Series firewall

Question 15

How much time does it take to a bootsrapped firewall to become available for a service?

Answer 15

7-9 minutes