PALO ALTO FIREWALL (PANOS 10)

Palo Alto Firewall Configuration, Management and Troubleshooting –PANOS 10

This training will help you to configure and manage:

  • The essential features of a Palo Alto Networks next-generation firewall
  • Security Policy , NAT Policy , Decryption Policy
  • App ID , Content ID and User-ID
  • Site to Site IPsec VPN and Global Protect
  • Firewall high availability
  • Network traffic monitoring and reporting using the firewall’s interactive web interface
  • Troubleshooting using Packet Capture and Packet Flow Logic

Objectives

Successful completion of this course should enhance the participant’s understanding of how to configure and manage Palo Alto Networks next-generation firewalls. The student should learn and get hands-on experience configuring, managing, and monitoring a firewall in a lab environment.

Target Audience

Security Engineers, Security Administrators, Security Operations Specialists, Security Analysts, Network Engineers, and Support Staff

Prerequisites

Participants must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students also should be familiar with basic security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.

“We not only explain the theory but how to use every feature in real life with practical demonstration and troubleshooting”

Course Modules

Module 1: Firewall and Networking Basics

  • Gateway Vs Security Gateway
  • Legacy Vs Next Generation Firewalls
  • Stateful Packet Inspection (SPI)
  • Core Features of Palo Alto Firewall

Module 2: Platforms and Architecture

  • Next-Generation Firewall Architecture – Concept
  • Firewall Platforms – Overview
  • Zero Trust Security Model – Concept
  • Public Cloud Security – Overview

Module 3: Initial Configuration

  • Administrative Controls – Overview
  • CLI - Overview and How To
  • Initial Access to the System – How To
  • Configuration Management - Concept and How To
  • Licensing - Overview and How To
  • Service Route - Concept, Best-Practices and Configuration

Module 4: Interface Configuration

  • Security Zones and Interfaces – Concept
  • Layer 3 interfaces - Concept and Use Cases
  • Layer 3 interface – Configuration
  • Layer 3 Sub interfaces - Concept and Use Cases
  • Layer 3 Sub interfaces - Configuration and Best Practices
  • Interface Management Profile – Concept
  • Interface Management Profile - Configuration and Best Practices
  • Virtual-Wire - Concept and Use Cases
  • Tap interfaces - Concept and Use Cases
  • Layer 2 interfaces - Concept and Use Cases
  • Layer 2 interface – Configuration
  • Virtual Router – Concept
  • Virtual Router – Configuration
  • Virtual Router – Troubleshooting

Module 5: Security and NAT Policies

  • Security Policy Fundamentals – Concept
  • Security Policy Administration – How To
  • NAT Overview and Flow Logic – Concept
  • Source NAT – Concept
  • Source NAT – Configuration
  • Source NAT with Static or Dynamic mapping - Concept and Configuration
  • Destination NAT - Concept
  • Destination NAT – Configuration
  • Destination NAT with Port Forwarding - Concept and Configuration
  • Bi-Directional NAT - Concept and Configuration
  • NAT Troubleshooting

Module 6: Application Identification-App ID

  • Application Identification – Overview
  • Application Identification Flow Logic – Concept
  • Using App-ID in a Security Policy - Concept and How To
  • Application Group and Application Filter
  • Security Policy and App-ID – Troubleshooting

Module 7: Content-ID and Security Profiles

  • Content-ID – Overview
  • Antivirus - Concept Configuration and How To
  • AntiSpyWare - Configuration and Log How To
  • Vulnerability Protection - Configuration and Log How To
  • File Blocking - Configuration and Log How To
  • External Dynamic Lists - Concept and Configuration
  • Security Profile - Best Practices

Module 8: URL Filtering

  • URL Filtering – Overview
  • URL Filtering – Configuration

Module 9: Decryption Policy

  • SSL – Concept
  • SSL Outbound Decryption – Concept
  • SSL Outbound Decryption – Configuration

Module 10: Wildfire

  • Wildfire – Concepts
  • Wildfire - Configuration and Reporting

Module 11: User Identification

  • User-ID – Concept
  • Active Directory Integration - Concepts and Best Practices
  • User-ID - Configuration and Best Practices
  • User-ID and Group Mapping – Troubleshooting

Module 12: Site-to-Site VPN

  • Site to Site VPN – Concept
  • Site to Site VPN - Configuration and Best Practices
  • Site to Site VPN – Troubleshooting

Module 13: Global Protect

  • Global Protect – Concept
  • Global Protect - Configuration and Best Practices

Module 14: High Availability

  • High Availability – Overview
  • Active/Passive High Availability – Concept
  • Active/Active High Availability – Concept
  • Active/Passive High Availability - Configuration and Best Practices
  • Active/Passive High Availability - Configuration and Best Practices

Module 15: Routing in Palo Alto firewall

  • Virtual Router
  • Static and Dynamic Routing

Module 16: Software Upgrades and Updates

  • PANOS Software upgrades
  • Dynamic updates

Module 17: DoS Protection

  • Zone Protection File
  • DoS Policy

Module 18: Troubleshooting

  • Packet Flow in Palo Alto firewall
  • Backup and Restore of configuration file
  • Packet Capture at different stages
  • Testing security Policy
  • Logging, Reporting and Monitoring
  • Creating Tech Support File
  • Command Line Interface (CLI)
  • Using Packet flow Login in Troubleshooting