This 2 day class focuses on configuration, security policy design and implementation for Palo Alto Networks next generation firewalls.
Concepts introduced. Hardware and PAN-OS architecture.
Firewall Configuration Concepts
Configuration of: L3 interfaces, security zones, virtual routers and network address translation (NAT).
Defining Untrusted Network Security Policy
Security policy definition, configuring security profiles including URL Filtering.
Configuration of: User-ID agent and captive portal. Using user and group information in security policies.
Implementing Advanced Security Policy
Defining policies for: SSL decryption, inbound NAT and data filtering.
Overview of route-based VPN. Configuring simple and advanced VPN (IPSec and SSL).
Configuration of: role based administration, high availability, Panorama and shared policy. Best practices for software release management and configuration control.
Expanded Networking Capabilities
Using and configuring: L2, Vwire, Tap interfaces, VLAN tags and Policy Based Forwarding. Creating custom applications and defining application overrides.
Using log viewer, defining log filters, creating custom and summary reports, setting report email schedules.
COST: USD 2,300.00 per person for 2 days training course, inclusive of books and lunch break