Palo Alto Networks : Extended Firewall Management
Target Audience
This course is best positioned for Security Engineers, Networks Engineers and Support staff.
Prerequisites
Completion of Palo Alto Networks : Essentials
Students must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students should also be familiar with basic port-based security concepts.
Course Objective
Successful completion of this three-day, instructor-led course will enhance the student’s understanding of how to install, configure, manage, and perform basic troubleshooting on the entire line of Palo Alto Networks Next-Generation firewalls.
Additionally, students will be instructed on the basics of implementing and managing GlobalProtectTM, Panorama, and Active/Active High Availability.
Students will gain an in-depth knowledge of how to optimize their visibility and control over applications, users, and content.
Course Contents
Extended Firewall Management is the next-level follow-on course to Palo Alto Network’s : Essentials (PAN-EDU-201).
Extended Firewall Management expands on 201 course topics, while introducing many new features and functions of Palo Alto Networks Next-Generation firewalls.
This is the agenda of 3 days class :
DAY 1
Module 0 – Introduction and Overview
Module 1 – Administration
- Service Route Configuration, Virtual Systems, and Log Forwarding
Module 2 – Interface Configuration
- VLAN’s and QoS
Module 3 – Layer 3 Concepts NAT, OSPF and DNS Proxy
- Working with NAT, OSPF, and DNS proxies
Module 4 – Application-ID
- Custom Application Signatures, Application Filters and Groups
Module 5 – Content-ID
- Custom Threat ID, Data Filtering, DLP, Botnet, and DoS
DAY 2 & 3
Module 6 – User-ID
- LDAP and Custom API
Module 7 – High Availability
- Active/Active
Module 8 – GlobalProtect
- GlobalProtect concepts and configuration
Module 9 – Panorama
- Panorama shared Policy, Device Groups, Access Control, and Reporting