Map the public IP to the internal Web Server. (Assumption: Public IP is 203.0.113.5)
For certification students (PCNSA/PCNSE) and lab engineers, EVE-NG and GNS3 are the most popular methods to simulate Palo Alto firewalls. palo alto firewall simulator
