While there is no web-based "game" simulator for Palo Alto firewalls, the industry standard for simulation is running a virtual instance of the actual firewall software.
(Note: In a real setup, you would also configure a Default Route 0.0.0.0/0 pointing to the ISP Gateway on ethernet1/1). palo alto firewall simulator
Palo Alto provides BYOL (Bring Your Own License) images in cloud marketplaces. While there is no web-based "game" simulator for
Firewalls are zone-based. Traffic can only flow between zones if a policy allows it. palo alto firewall simulator