--- title: "Configuring a Palo Alto Networks Firewall with Firmware Lower than 8.0" slug: "configuring-a-palo-alto-networks-firewall-with-firmware-lower-than-8-0" updated: 2026-05-22T19:35:19Z published: 2026-05-22T19:35:19Z canonical: "help.8x8.com/configuring-a-palo-alto-networks-firewall-with-firmware-lower-than-8-0" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://help.8x8.com/llms.txt > Use this file to discover all available pages before exploring further. # Configuring a Palo Alto Networks Firewall with Firmware Lower than 8.0 ## Objective Configuring a Palo Alto Networks Firewall for 8x8 services. > [!NOTE] > Note: > > Guidance on Palo Alto Networks firewalls is publicly available within [Palo Alto Networks device documentation](https://www.paloaltonetworks.com/documentation/platforms). ## Applies To - Palo Alto Networks Firewalls ![PA-5060_Left.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10682) ## Procedure The purpose of this article is to provide a **sample configuration**. At the time of article creation, this device was in a known working state on the firmware used. **Keep in mind different firmware versions will interact with hosted VoIP services in different ways.** While this device may be fully functional on the tested and/or current firmware version, it is possible newer revisions will cause disruptions in service or make a device fully compliant with the required settings for hosted VoIP services where it was previously not. For Palo Alto firewalls on firmware lower than 8.0. For configuring a Palo Alto Networks Firewall with firmware 8.0 and higher, see [Configure a Palo Alto Networks (PAN) Firewall with Firmware 8.0 and Up](/support/docs/configure-a-palo-alto-networks-pan-firewall-with-firmware-8-0-and-up). ### Administrative Information 1. Make sure your firewall is powered on and connected to your network. 2. Connect the RJ-45 Ethernet cable from the RJ-45 port on your computer to the MGT port on the firewall. 3. Change the IP address on your computer to an address in the **192.168.1.0/24** range (e.g., 192.168.1.3). 4. In a browser on a computer on the same network as the Palo Alto Networks firewall, navigate to **https://192.168.1.4** 5. Log in (default credentials shown below). - Username: **admin** - Password: **admin** > [!NOTE] > **Note:** > > If you are not able to connect to the web interface, consult the [quick start guide for your particular device model](https://www.paloaltonetworks.com/documentation/platforms) for additional options. **Adding or editing 8x8 subnets is recommended when available.** *Review* [*X Series Technical Requirements*](/support/docs/x-series-technical-requirements)*.* ### Configuring 8x8 Voice Services on Palo Alto Networks Firewalls #### Disable SIP ALG 1. Go to **Objects** > **Applications**. 2. Search for and select **SIP***.* ![PAN01.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10697) 3. In the SIP Application window, under **Options**, to the right of **ALG**, click **Customize**. ![PAN02.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10694) 4. Check the box to **Disable ALG**. ![PAN03.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10696) 5. Click **OK**, then **Close** the SIP Application window. #### Import the 8x8 Application XML into the PAN System 1. Download the ![](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/global_doc.gif)[8x8_Palo_Alto_Networks_XML](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/8x8_Palo_Alto_Networks_XML.xml%20(1).zip) file to your computer. 2. Go to **Objects** > **Applications**. 3. Click **Import**. ![PANXML.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10680) 4. Import the downloaded 8x8 Palo Alto Networks XML file. #### Add 8x8 Public IP Subnets 1. Go to **Objects** > **Addresses**. 2. Click **Add**. ![PAN05.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10688) 3. For the **complete list of 8x8 subnets**, see [*X Series Technical Requirements*](/support/docs/x-series-technical-requirements)*.* #### Create an Address Group for 8x8 Public IP Subnets 1. Go to **Objects** > **Address Groups**. 2. Add all entries you created in the previous screen. (The Name can be whatever you prefer.) ![PAN06.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10684) #### Create an Application Override Rule for UDP 1. Go to **Policies** > **Application Override**. 2. Click **Add**.![PAN07.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10689) 3. On the General tab, name the rule and add a description. ![PAN08.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10690) 4. On the Source tab, set **Source Address** or **Source Zone** (this is any subnet or zone that will have 8x8 phones or 8x8 8x8 Work Desktop or Mobile running on it). ![PAN09.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10685) 5. On the Destination tab, set the **Destination Address** by adding the **Destination Address group** you created earlier. 6. ***Untrust*** the zone for your network. ![PAN10.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10699) 7. On the Protocol/Application tab, select **UDP**. 8. Copy and paste all of the following UDP ports into the **Port** field: 5060,5061,5196-5199,5299,5399,5301,5401,5443 9. For **Application**, select **8x8 App**. ![PAN11.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10686) 10. Click **OK**. #### Create a Security Rule on PAN System 1. Go to **Policies** > **Security**. 2. Click **Add**. ![PAN12.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10695) 3. On the General tab, name the Security Rule and add a Description as desired. ![PAN13.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10698) 4. On the Source tab, set **Source Address** or **Source Zone** (this is any subnet or zone that will have 8x8 phones or 8x8 8x8 Work Desktop or Mobile running on it). ![PAN14.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10691) 5. Leave the User tab blank. 6. On the Destination tab, set the **Destination Address** by adding the **Destination Address group** you created earlier. 7. ***Untrust*** the zone for your network. ![PAN15.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10692) 8. On the Application tab, click **+ add** and add **8x8 App**. ![PAN16.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10681) 9. Leave **Service/URL Category** tab blank (or as set by default). 10. On the Actions tab, set **Action Setting** to **Allow**. ![PAN18.png](https://cdn.us.document360.io/e3a59e39-abd3-4423-964c-0a4008dc5673/Images/Documentation/10693) 11. Click **OK**. 12. **Move the newly created security rule to the top of rule list to avoid rule conflicts**. 13. **Commit Changes**. ## Additional Information The phones require a minimum UDP and TCP time out of 660 seconds or 11 minutes. Depending on the network setup, these settings may need to be modified on the PAN.