The Local Gov Skillet is indented for Local Government deployment configuration as an Internet Gateway using 2 zones, the untrust zone as a dhcp-client, with pre built block policies and compliance Tags.
The security policy provides for outbound policies using IronSkillet best practice security profiles and groups.
- PAN-OS 9.X
- Threat, URL, and Wildfire subscriptions
- Panhandler
LocalGov Skillet is designed to be used with the panhandler application to API load structured configurations. It also captures web form data to semi-customize the configuration for local use.
Before using this Skillet you should download and install the latest Threat package on the target firewall.
The code and templates in the repo are released under an as-is, best effort, support policy. These scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible. We do not provide technical support or help in using or troubleshooting the components of the project through our normal support options such as Palo Alto Networks support teams, or ASC (Authorized Support Centers) partners and backline support options. The underlying product used (the VM-Series firewall) by the scripts or templates are still supported, but the support is only for the product functionality and not for help in deploying or using the template or script itself. Unless explicitly tagged, all projects or work posted in our GitHub repository (at https://github.com/PaloAltoNetworks) or sites other than our official Downloads page on https://support.paloaltonetworks.com are provided under the best effort policy.
- Builds on the Iron Skillet configurations
- Tag creation
- Optional country block - Only allows IPs from US, Mexico, Canada, and cloud providers (based on EDL)
- Targeted decryption policies to help enable SSL-Decryption adoption and limit risk
The LocalGov Skillet is intended to be used with Panhandler. There is a 3-step depmoyment process that is intended to be executed in order.
- Step #1: Load Iron-Skillet
- Step #2: NGFW Content Updates
- Step #3: LocalGov Skillet Config