====== PaloAlto ======

Disable ZTP:
<code>
set system ztp disable
</code>

==== MANAGEMENT ====

It's possible to use data ports for management. It's done via ''Interface Management Profile'':
  * Create in //Network | Network Profiles | Interface Management Profile//
  * Then attach to //Network | Interfaces on the Advanced//

CLI verison:
<code>
set network profiles interface-management-profile mgmt https yes ssh yes permitted-ip 10.15.15.37
set network profiles interface-management-profile mgmt permitted-ip 192.168.0.5
</code>

**Service Route Configuration**

If the management interface does not have access to the internet, this can create interesting challenges as it will not be able to retrieve updates or perform cloud lookups. A workaround is to enable service routes that route specific applications, services, or protocols via the backplane onto a designated data plane interface


  * //Device | Setup | Services//
  * //Service Route Configuration//