Build a PAN-OS security policy in the web UI

Open the PAN-OS device Web UI and select Policies to review the committed security rules.

The target is blocked, while a separate control path is allowed.

Add an allow rule for the client address and target address in the selected zones.

Pending Changes means the target still follows the running policy.

Select Commit and wait for the policy status to show Committed.

Repeat both probes to confirm the target is reachable and the control path still works.

Reopen the lab and confirm that the same rule is still committed.

Check the running security policy in the firewall terminal.