Palo Alto Firewall course is one of the most widely adopted firewalls worldwide to safeguard and secure Cloud Infrastructures. Palo Alto training is an advanced-level course dealing with Network traffic. It features installing, accessing, managing, troubleshooting, understanding, and differentiating core components of Network Security Operators. Palo Alto course also includes in-detail critical Security concepts of Network and Security Program elements.

Eligibility

• Graduation

• Basic understanding of the IT industry

• Basic understanding of Networking

• Fundamental knowledge of Network Security

Curriculum designed to clear the Palo Alto Exam

PCNSE: Core Concepts

• Palo Alto Network Products

• Appropriate Interfaces or Zone Types

• Decryption Deployment Strategies

• Enforce User-ID

• Authentication policy

• Fundamental functions

• Multiple Virtual Systems (multi-vsys)

• Environment

PCNSE: Deploy and Configure core Components

• Configure Management Profiles

• App-ID Deploy and configure Security Profiles

• Zone protection, packet buffer protection, and DoS protection

• Deployment configuration of a Palo Alto Networks firewall

• Configure authorization, authentication, and device access

• Configure and manage certificates

• Configure routing

• Configure NAT

• Configure site-to-site tunnels

• Configure service routes

• Configure application-based QoS

PCNSE: Deploy and Configure Features and Subscriptions

• Configure App-ID

• Configure Global Protect

• Configure decryption

• Configure User-ID 149

• Configure Wild Fire

• Configure Web Proxy

PCNSE: Deploy and Configure Firewalls Using Panorama

• Configure templates and template stacks

• Components configured in a template

• Overriding a template value in a stack

• Configure variables in templates

• Configure device groups

• Device group hierarchies

• Identify what device groups contain

• Manage firewall configurations within Panorama

• Licensing

• Commit recovery feature

PCNSE: Manage and Operate

• Manage and configure log forwarding 181

• Log Monitoring, Create and manage tags, Manage external services

• Palo Alto Networks system

• Single firewall, High availability pairs, Panorama push, Dynamic updates

• Manage HA functions

• Link monitoring, Path monitoring, Failover, HA interfaces, Clustering

PCNSA: Troubleshooting

• Troubleshoot site-to-site tunnels

• Troubleshoot interfaces

• Troubleshoot Decryption

• Troubleshoot routing

• General Troubleshooting

• Troubleshoot resource protections

• Troubleshoot Global Protect

• Troubleshoot policies

• Troubleshoot HA functions

PCNSA: Device Management and Services

• Firewall management interfaces

• Provision local administrators

• Maintain firewall configurations

• Push policy updates to Panorama-managed firewalls

• Schedule and install dynamic updates

• Create and apply security zones to policies

• Identify and configure firewall interfaces

• Maintain and increase the configuration of a virtual/logical router

PCNSA: Managing Objects

• Create and maintain address and address group objects

• How to tag objects

• Difference between address objects

• Static vs dynamic groups

• Configure and maintain application filters and application groups

• Using filters vs groups

• Purpose of application characteristics according to App-ID database

PCNSA: Policy Evaluation and Management

• Application-based Security Policy

• Rule shadowing, Group rules by tag

• Differentiate specific security rule types

• Interzone, Intrazone, Universal

• Security policy match conditions, actions and logging options

• Application filters and groups, Logging options, App-ID, User-ID, Device-ID

• Identify and implement NAT policies

• Destination, Source

• Optimize security policies using appropriate tools

• Policy test match tool, Policy optimizer

PCNSA: Securing Traffic

• Compare and contrast different types of security profiles

• Create, modify, add and apply the appropriate security profiles and groups

• Use the information available in the logs

• Enable DNS security to control traffic based on domains

• Create and deploy URL-filtering-based controls

• Differentiate between group mapping and IP-to-user mapping within policies and logs