A robust, free open-source tool. GNS3 requires you to upload PAN-OS images (usually in QEMU format) to build and verify your labs.
For those who prefer a standard hypervisor, you can deploy the VM-Series firewall directly as a virtual machine. This is ideal for straightforward testing of management interfaces and basic policy sets. 2. Official Palo Alto Training Labs
Mastering the Palo Alto Networks environment often requires more than just reading manuals—it demands hands-on experience through a or lab environment. Whether you are studying for your PCNSE certification or testing complex NAT rules before a production rollout, simulating a Next-Generation Firewall (NGFW) is essential. 1. Popular Simulation & Emulation Platforms
Most professionals use dedicated network emulation tools rather than a "simulator" in the strict sense, as these allow you to run actual PAN-OS images for a 1:1 experience with the real hardware.
If you don't have the hardware to run a local lab, Palo Alto Networks provides several cloud-based options: Virtual Test Lab - LIVEcommunity - Palo Alto Networks
A favorite among network engineers, EVE-NG allows you to scale your labs based on your hardware's compute power. It supports full PAN-OS images, enabling you to practice complex configurations like high-availability (HA) pairs and BGP testing.
