Sign Up
Course Content
1. Platforms and Architecture
0/1
Implementation of a firewall Flow Logic and Single Pass Architecture Palo Alto parallel processing Firewall types Declare that the Firewall has been thoroughly inspected Packet Filtering Firewall Application aware firewall The fundamentals of wire shark packet analysis (ICMP, DNS, TCP, UDP SSH, SSL).
2. Initial Configuration
0/1
First Use of the System Palo Alto CLI is now available Palo Alto’s control plane and data plan The distinction between operational mode and configuration mode Configuration Administration Software Updates and Licensing Account Management The distinction between Candidate and Running configurations.
3. Interface Configuration
0/1
Security Zones: An Overview Palo Alto Layer 2 deployment Layer 2 configuration with logical vlan interface Layer 2 deployment using the same or distinct vlans Scenario for TAP mode deployment Palo Alto V-wire mode deployment Palo Alto interface Layer 3 configuration Configuration of Sub-interfaces and Inter-Vlan Routing Configuration of service routes on an interface Configuration of DHCP Virtual Router Introduction Configuration of Virtual Router Scenarios.
4. Security and NAT Policies
0/1
Configuration of Security Policies Policy Management Cleanup Rule, Interazone, and Interzone Rule Configuration of NAT PAT at the Firewall interface Dynamic NAT with IP pool Understanding of the Proxy Arp idea Configuration of a Bidirectional Static NAT NAT U-Turn Configuration The same zone (dual NAT setup) Different Zone U-Turn NAT Configuration (Inter zone) Pool IP destination NAT setting (load distribution) Static PAT setup | PORT FORWARDING NAT configuration and flow for the external pool Configuration of virtual wire netting.
5. App-ID™
0/1
Palo Alto Application ID Signature Based Inspection App ID Flow Logic Understanding Application ID Terms (Incomplete, Insufficient Data, Unknown TCP/UDP) APP ID configuration (Security Rule base) Creating a custom App-ID signature (URLS for Particular Pattern) Outbound SSL Inspection with App ID.
6. Content-ID™
0/1
Antivirus Anti-spyware Vulnerability URL Filtering File Blocked: Wildfire.
7. Encryption /Decryption
0/1
Certificate Administration SSL /TLS Theory Decryption of outbound SSL traffic Decryption of inbound SSL traffic.
8. User-ID™
0/1
Counting Users Users are assigned IP addresses. Configuration of the User-ID Agent and LDAP.
9. VPN Configuration
0/1
IPsec Protocol Suit Theory Packet Specifications (PHASE-1, PHASE-2) The distinction between Main mode and aggressive mode The distinction between policy-based VPN and tunnel-based VPN Tunnels between Palo Alto firewalls using IPSec Palo Alto to Cisco Device/Checkpoint Gateway IPSec Tunnel Dynamic routing protocol implementation in route-based VPN (OSPF Configuration) Palo Alto Scenario-Based Troubleshooting (Analysis of PCAP Files) Palo Alto’s advanced debug command for VPN troubleshooting VPN remote access implementation Configuration of a global protect VPN / SSL VPN for remote users Global Security Portal Global Security Gateway.
10. Management & Reporting
0/1
Dashboard Introduction ACC (Application command center) Logging Fundamentals Filtering and analysing logs System changes and logs Fundamental Reports.
11. Active/Passive High Availability
0/1
Knowledge of High Availability Palo Alto active/passive HA setup HA Control Link DATA Link Theory Palo Alto active/active configuration with Floating IP address Active/active Palo Alto setup with arp load balancing Configuration of Active/Active NAT.
12. Routing Configuration and PBR
0/1
Palo Alto Routing Table and Forwarding Table Understanding Path Monitoring in Palo Alto: An Overview Configuration of ECMP (Equal Cost Multiple Path) with Dual ISP Load-Balancing Algorithms for ECMP OSPF routing and configuration introduction BGP routing and configuration introduction Configuration and testing of policy-based routing with dual ISPs Metric and administrative distance comprehension (virtual Router).
13. Panorama
0/1
Configuration and deployment are centralised Logging and reporting are centralised Access Control Based on Roles What is the difference between a pre rule, a post rule, and a default rule?
14. Advance Trouble Shooting and packet capture
0/1
In Palo Alto, the packet dig command is used Packet capture in graphic mode Pan OS’s directory system and daemons Live traffic log collection and analysis Policy command for NAT and security rules testing The grep command is used to look for patterns Palo Alto mp-log and dp-log use.
Palo Alto Training
About Lesson


Previous
Next