Palo Alto: Firewall 9.0: Essentials - Configuration and Management (210)

HAUPTMERKMALE

During the course, your expert instructor will work through the course material preparing for the PCNSA exam as well as the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification.

Inhalt

Your course package is designed to provide maximum learning and convenience. This is included in the price of your course:

• VON EINEM AUSBILDER GELEITETE SCHULUNG
• ALLE KURSUNTERLAGEN
• PRÜFUNGSGUTSCHEIN
• ZERTIFIZIERUNGSGARANTIE
• VON EINEM AUSBILDER GELEITETE SCHULUNG
• UNTERKUNFT
• ALLE KURSUNTERLAGEN
• ALLE MAHLZEITEN
• PRÜFUNGSGUTSCHEIN
• ZERTIFIZIERUNGSGARANTIE

PRÜFUNGEN & ZERTIFIZIERUNGEN

Your expert instructor will get you ready for the following exam and certification, which are included in your course package and covered by the Certification guarantee.

• PCNSA Exam (PCNSA)
• Palo Alto Networks Certified Network Security Administrator (PCNSA)

VORAUSSETZUNGEN

Students must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students also should be familiar with basic security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.

Vollständiger Lehrplan

Using our engaging learning methodology including a variety of tools, we’ll cover the entire curriculum.

Module 1: Next Generation Security Platforms and Architecture

- Security platform overview
- Next-generation firewall architecture
- Zero Trust security model
- Public cloud security
- Firewall offerings

Module 2: Virtual and Cloud Deployment

- VM-Series Firewall
- Cloud Overview
- Cloud Infrastructure
- Public Cloud Use Case: AWS

Module 3: Initial Configuration

- Administrative Controls
- Initial System Access
- VM-Series Initial Configuration
- Configuration Management
- Licensing and Software Updates
- Account Administration
- Viewing and Filtering Logs

Module 4: Interface Configuration

- Security zones and interfaces
- Tap interfaces
- Virtual Wire interfaces
- Layer 2 interfaces
- Layer 3 interfaces
- Virtual routers
- VLAN interfaces
- Loopback interfaces
- Policy-based forwarding

Module 5: Security and NAT Policies

- Security policy fundamental concepts
- Security policy administration
- Network Address Translation
- Source NAT configuration
- Destination NAT configuration

Module 6: App-ID

- Application Identification (App-ID) overview
- Using App-ID in a Security policy
- Identifying unknown application traffic
- Updating App-ID

Module 7: Content-ID

- Content-ID overview
- Vulnerability Protection Security Profiles
- Antivirus Security Profiles
- Anti-Spyware Security Profiles
- File Blocking Profiles
- Attaching Security Profiles to Security policy rules
- Telemetry and threat intelligence
- Denial of service protection

Module 8: URL Filtering

- URL Filtering Security Profiles
- Attaching URL Filtering Profiles

Module 9: Decryption

- Decryption concepts
- Certificate management
- SSL Forward Proxy decryption
- SSL Inbound Inspection
- Other decryption topics:
- Unsupported applications
- No decryption
- Decryption port mirroring
- Hardware security modules
- Troubleshooting SSL session terminations

Module 10: WildFire™

- WildFire concepts
- Configuring and managing WildFire
- WildFire reporting

Module 11: User-ID

- User-ID overview
- User mapping methods overview
- Configuring User-ID
- PAN-OS® Integrated agent configuration
- Windows-based agent configuration
- Configuring group mapping
- User-ID and Security policy

Module 12: GlobalProtect

- GlobalProtect overview
- Preparing the firewall for GlobalProtect
- Configuration: GlobalProtect Portal
- Configuration: GlobalProtect Gateway
- Configuration: GlobalProtect agents

Module 13: Site-to-Site VPN's

- Site-to-site VPN
- Configuring site-to-site tunnels
- IPsec troubleshooting

Module 14: Monitoring and Reporting

- Dashboard, ACC, and Monitor
- Log forwarding
- Syslog
- Configuring SNMP

Module 15: Active/Passive High Availability

- HA components and operation
- Active/passive HA configuration
- Monitoring HA state

Module 16: Next Generation Security Practices

- Migration Guidelines
- Analyzing ACC Information
- Optimizing Security Profiles
- Heatmap and Best Practice Assessment (BPA)