Accessing your Palo Alto Virtual will always be done via https://panorama.net.wisc.edu. This is just the front end and does not provide any firewalling capabilities. You have to change to the actual chassis doing the firewalling in order to view your firewall logs and/or policies.
Log into your Palo Alto virtual firewall via https://panorama.net.wisc.edu and enter your NetID and password. On Jan. 28th, 2020 @ 10AM, Duo-MFA will be enabled.
Some folks are not DUO eligible per IAM and HR. If you find you are not DUO eligible and need access to a Campus Firewall, please create a HelpDesk ticket asking Network Services to add you to the DUO eligible group.