Using a virtualized environment is the standard approach for preparing for certifications like the PCNSA (Palo Alto Networks Certified Network Security Administrator) and PCNSE (Palo Alto Networks Certified Network Security Engineer).
If you are serious about advancing your career in network security, invest the time into building a virtual lab—it is the best preparation tool available for mastering PAN-OS.
Which one to pick based on your current skill level. Option 2: The Technical Tutorial (Hands-on Learners) palo alto firewall simulator
Note: Avoid downloading images from unverified third-party sources, as they may contain altered code or malware. Step-by-Step Guide: Setting Up Palo Alto in EVE-NG
It is important to clarify a common misconception: Palo Alto does not offer a single, standalone "simulator" in the sense of a lightweight, code-only emulator. Instead, the ecosystem provides for simulation and learning: the Strata Cloud Manager (SCM) Simulator and the Palo Alto VM-Series virtual firewall (often used with trial licenses). Using a virtualized environment is the standard approach
Unlike Cisco or Juniper, Palo Alto firewalls are emulated via KVM/ESXi. Expect these constraints:
Experience Real-World Palo Alto Firewall Configuration with Our Simulator! Option 2: The Technical Tutorial (Hands-on Learners) Note:
admin@PA-VM> configure admin@PA-VM#
(like Packet Tracer), but combining the VM-Series trial with a methodical logbook gives you a report far more valuable than a simulator’s output.
EVE-NG offers a robust web-based interface. It handles Palo Alto VM-Series images exceptionally well, allowing you to connect the firewall to virtual routers, switches, and client machines. GNS3 (Graphical Network Simulator-3)
Highly recommended. You can run VM-Series images, connect them to switches, routers, and traffic generators, creating a complete network simulation.