Palo Alto Networks Firewall Essentials: Configuration and Management Training Course

Introduction

• Overview of the Palo Alto Networks security portfolio and underlying architecture
• Analysis of the firewall structural design

Initial Setup

• Configuration of baseline firewall parameters
• Establishment of management network settings
• Activation procedures for the firewall system
• Oversight of license validation and software lifecycle

Configuration Management

• Administering system configurations
• Review and monitoring of firewall log data

Administrator Account Administration

• Administration of firewall authentication and authorization protocols
• Creation of a local firewall administrator profile
• Creation of a non-local firewall administrator profile
• Establishment of a firewall administrator profile for automated, non-interactive access

Integration with Production Networks

• Threat mitigation through network segmentation strategies
• Implementation of network interfaces and security zones
• Utilization of Layer 3 interfaces and sub-interfaces
• Deployment of virtual wire interfaces
• Configuration of tap interfaces
• Application of virtual routers
• Setup of loopback interfaces

Security Policy Administration

• Development and maintenance of security policy rules
• Development and maintenance of NAT policy rules
• Regulation of application utilization via app-ID technology

Threat Mitigation

• Threat blocking through the application of security and NAT policies
• Prevention of packet- and protocol-based malicious activities
• Blocking of threats originating from known malicious sources
• Threat identification and mitigation based on application fingerprints
• Threat identification and mitigation based on user identity
• Threat identification and mitigation based on device identification
• Protection against unknown or emerging threats
• Mitigation of threats within encrypted traffic streams
• Prevention of unauthorized use of compromised credentials
• Threat blocking through the application of comprehensive security profiles
• Restriction of inappropriate web content via URL filtering
• Implementation of decryption mechanisms to inspect encrypted traffic for threats

Threat and Traffic Intelligence

• Extraction of actionable insights from logs and analytical reports
• Transmission of threat and traffic data to external information-sharing services

Security Best Practices

Summary and Subsequent Actions