HomeSkillet Overview¶
HomeSkillet is a home-based deployment configuration as a simple Internet Gateway using 2 zones.
It is compatible with PAN-OS versions 10.0, 10.1 and 10.2.
Note
As of PAN-OS 10.2 HomeSkillet has reached End of Engineering status and future versions will no longer be actively worked on or supported by Palo Alto Networks.
Key Features¶
IronSkillet foundation providing security profiles and device hardening
2 zones and interfaces, one internet and one internal
L3, Hybrid L2/L3, and vwire options available for network configuration
Outbound port-based NAT policy
Outbound security policies referencing the Outbound security profile group
DHCP client interface for the untrust interface
Simple DHCP server configuration inheriting DNS from the untrust interface
Relationship to the IronSkillet Project¶
The configuration is based extensively on the IronSkillet configuration with a few variations designed for basic home use.
The config element omitted from HomeSkillet include:
No certificate checks for the no-decrypt traffic that may cause issues with in-home devices
No email alert configuration elements
No http range that when disabled can impact video streaming services
More information about IronSkillet can be found at: https://iron-skillet.readthedocs.io
Required Subscriptions¶
The configuration assumes all subscriptions are enabled including:
Threat Protection
URL Filtering
Wildfire Analysis
DNS Cloud Service
kplay Solutions Content¶
Visit the kplay Solutions page in the LIVE Community for additional updates and related skillets.