Palo-Alto Firewall

Palo Alto Networks is one of the quickest growing security corporations in the market, with its Next-Generation Firewalls, Advanced end point Protection and Threat Intelligence Cloud. Organizations from all industries throughout the globe rely on Palo Alto Networks to find and stop advanced cyber attacks.

Our town Networks Courses are designed to equip engineers with the skills required to know, configure, support, troubleshoot and manage palo alto Networks Next-Generation Security Platform merchandise in their care. data transfer through our academic program helps each our business partners and their customers become more practical in supporting and/or managing solutions. Our high levels of certification and training credentials represent themselves, through approved training endorsement with the vendors in our product portfolio.

Palo Alto Networks Certification:

• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Palo Alto Networks Accredited Configuration Engineer (ACE)

Physical Devices Available For Palo-Alto Training.

• Palo-Alto Firewall PA-500 &220
• Routers: 1841, 2621, 2811, 2911,3800 Series
• Switches: 2950, 3750, 7200Series

Modes of Training Available.

• Online Training
• Classroom Training

Prerequisites – Networking concept

Module 1: Platforms and Architecture

• Single Pass Architecture n Flow Logic
• Introduction of firewall
• Types of firewall
• State full inspection of Firewall
• Basic Wire shark packet analysis (ICMP, DNS ,TCP ,UDP SSH SSL)

Module 2: Initial Configuration

• Initial Access to the System
• Introduction of Palo alto CLI
• Difference between Operational mode and Configuration mode
• Configuration Management
• Licensing and Software Updates
• Account Administration
• Difference between Candidate configuration and running

Module 3: Interface Configuration

• Introduction to Security Zones
• Layer 2 deployment of Palo Alto
• V-wire mode deployment of Palo Alto
• Layer 3 configuration of Palo Alto interface
• Sub-interfaces Configuration and Inter-vlan Routing
• Service route configuration on interface
• DHCP Configuration
• Introduction of Virtual Router
• Virtual Router Scenario based configuration

Routers Module 4: Security and NAT Policies

• Security Policy Configuration
• Policy Administration
• NAT Configuration
• PAT on Firewall interface
• Dynamic NAT with pool IP
• Proxy Arp concept and understanding
• Static Bi-directional NAT Configuration
• U-Turn NAT Configuration
• Destination NAT configuration on Pool IP
• Virtual wire Netting configuration
• Destination Nat with port address translation

Module 5: App-ID™

• App-ID Overview
• Application Groups and Filters

Module 6: Content-ID™

• Antivirus
• Anti-spyware
• Vulnerability
• URL Filtering
• File Blocking: Wildfire

Module 7: Decryption

• Certificate Management
• Theory of SSL /TLS
• Outbound SSL Decryption
• Inbound SSL Decryption

Module 8: User-ID™

• Enumerating Users
• Mapping Users to IP addresses
• User-ID Agent and LDAP Configuration

Module 9: Site-to-Site VPN

• Theory of IPSec tunnel
• Difference between Main mode and aggressive mode
• IPSec Tunnels between Palo alto firewall
• IPSec Tunnel between Palo alto and Cisco Device
• Introduction of remote access VPN
• Global protect VPN configuration in Palo Alto

Module 10: Management & Reporting

• Introduction of Dashboard
• Basic Logging
• Basic Reports

Module 11: Active/Passive High Availability

• Understanding of High Availability
• Palo alto active/passive HA configuration
• Palo Alto active /active configuration with Floating ip
• Palo Alto active/active configuration with arp load balancing
• Active/Active NAT configuration

Module 12: Routing Configuration and PBR

• Policy based routing configuration and testing with dual ISP
• Introduction of OSPF routing and configuration
• Understanding of Metric and administrative distance

Module 13: Panorama

• Centralized Configuration and Deployment
• Centralized Logging and Reporting
• Role-Based Access Control
• Difference Between pre rule, post rule and Default