Palo Alto Networks (PCNSA / PCNSE) Hands-on Project-Based Learning

Introduction to Firewall

Palo Alto Resource

Fortray Palo alto Student folder

Palo Alto Next-Gen firewall overview

Palo Alto devices selection

Palo Alto LAB Design

Resting to factory Default Lab Included

Initial IP Management access Lab Included

Palo Alto CLI Access via SSH & CLI (Command line interface) Overview Lab Included

Dashboard Overview Lab Included

Setup and Basic Management Lab Included

Login Banner & Message of the day Banner Lab Included

Saving and Committing the changes Lab Included

Revert - Last save configuration Lab Included

Revert - to Running configuration Lab Included

Config - Audit (Running VS Candidate Config) Lab Included

Save - The Candidate configuration Lab Included

Loading the Saved and configuration Version Lab Included

Export configuration and version Lab Included

Importing the configuration and version Lab Included

Reboot and Shut down the Firewall Lab Included

Reboot and Shut down the Firewall Lab Included

Management IP and permitted Networks Lab Included

Registering the FW & Verifying the License Lab Included

Dynamic update Lab Included

FW Upgrade with Licens Lab Included

FW Upgrade without License Lab Included

FW admin Account via Local user DatabaseLab Included

Role Based Admin User Account Lab Included

Response Pages Lab Included

Panorama CommitLab Included

Panorama Config Management

Panorama Services and Interface (DNS, NTP, update server) Default GW Lab Included

Panorama Licenses & registration Lab Included

Adding Palo Alto FW Manually to Panorama Lab Included

Automatically Adding Palo Alto FW to using CVS to PanoramaLab Included

Adding Tags to Palo Alto FW via PanoramaLab Included

Transition Locally configured FW to PanoramaLab Included

Upgrade PANOS Software and perform Dynamic updateLab Included

Check Point FW SSL Inspection Lab Included

Introduction to Panorama Template

Configuring Template via Panorama Lab Included

Template VS Template Stack

Configuring Template on Panorama for Head office FW

Configuring Template-Stack on Panorama for Head office FW

Configuring Template and Template Stack for Data Centre FW Lab Included

Configuring Template and Template Stack for VW Firewall Lab Included

Template Variable Concept (Note if it is easy, leave it)Lab Included

Assigning Variable to FW via TemplateLab Included

Device Group Concept Lab Included

Reference Template

Shared ObjectLab Included

Creating & applying Device Group for Head office FWLab Included

Creating & applying Device Group for Data Centre FW Lab Included

SNMP Trap via PanoramaLab Included

Syslog via PanoramaLab Included

Radius via PanoramaLab Included

TACACS+ via PanoramaLab Included

LDAP via Panorama for Head-OfficeLab Included

FW Log via Panorama Lab Included

Palo Alto Firewall overview (different vendor)

Zone Based FW

Deployment Options

Virtual Wire DeploymentLab Included

Layer 2 DeploymentLab Included

Layer 3 Deployment & interface MGMTLab Included

TAP Mode Deployment Lab Included

Virtual Router Concept & ConfigurationLab Included

Static and Default RoutingLab Included

DHCP ServicesLab Included

OSPF Routing – LAN to DMZ Lab Included

Route Verification Lab Included

Security Zone and Packet processing

Packet Flow

App–ID

Rule – Traffic from LAN to DMZ using Ports & App IDLab Included

NAT Rule – PAT for LAN to Internet Rule testingLab Included

Rules – using URL Filtering RulesLab Included

Rules – with URL Filtering ExceptionLab Included

How to use Custom URL FilteringLab Included

Address and Address GroupLab Included

Services and Services Group Lab Included

Application and Application Group Lab Included

Application FilteringLab Included

Application ExceptionLab Included

External Dynamic ListsLab Included

Using Tags Lab Included

User ID Integration Lab Included

Installing User ID Agent on the ADLab Included

Configure Firewall to use the user ID AgentLab Included

Configure and integrate the user ID Agent Lab Included

Group to user – ID MappingLab Included

Making Decision based on the user group ExampleLab Included

Identify users using Captive Portal Redirect ModeLab Included

Captive Portal using Browser Challenge SSO exampleLab Included

User ID mapping using Syslog Messages example Lab Included

Understanding Dynamic NAT and port Lab Included

Dynamic NAT and port configuration examplesLab Included

Static NAT concepts and exampleLab Included

Static NAT with Port Translation Use Case and scenario example Lab Included

Static NAT – INTERNET TO DMZ ExampleLab Included

Static NAT – INTERNET TO LAN ExampleLab Included

Source & Destination NAT (optional)Lab Included

High Availability OverviewLab Included

Active Passive Configuration Example Lab Included

Active Passive Failover - TestingLab Included

Active Passive Failover – OperationLab Included

Antivirus configuration Lab Included

Creating Anti-Spyware and DNS Sink holingLab Included

Creating custom Anti-Spyware signaturesLab Included

Configuring Vulnerability Protection and Custom SignatureLab Included

File PoliciesLab Included

Configuring WildfireLab Included

Wildfire PortalLab Included

Configuring Data Filtering - Data Leakage Prevention Lab Included

Data leakage demo - Credit Card Numbers Detection and BlockingLab Included

Data leakage demo - Credit Card Numbers Detection and BlockingLab Included

Implementing Zone and Host Denial Of Service Protection Lab Included

Certificates, Certificate of Authorities, and Decryption ConceptsLab Included

SSL Forward Proxy - Trust Certificate - Local Cert on Palo AltoLab Included

SSL Forward Proxy - Untrusted Certificate - Local Cert on Palo AltoLab Included

SSL Forward Proxy Using an Internal PKI Subordinate CALab Included

SSL Forward Proxy Blocking Threats in Encrypted Traffic – DemoLab Included

SSL Exception – Configuration ExampleLab Included

SSL Inbound InspectionLab Included

Concept of PBF (Policy Based Forwarding) Lab Included

PBF Configuration ExampleLab Included

PBF Exception ExampleLab Included

QoS Introduction Lab Included

QoS Download Upload Bandwidth RestrictionLab Included

QoS Classification and MarkingLab Included

QoS Classification and Markings ExampleLab Included

CLI show QOS detailsLab Included

Concept of Application Override Lab Included

Application Override – Configuration Example & VerificationLab Included

VPN IPSEC L2L intro and configuration steps Lab Included

VPN IPSEc L2L PaloAlto to PaloAlto ExampleLab Included

VPN IPSEc L2L PaloAlto to Cisco Router ExampleLab Included

Concept of Tunnel InspectionLab Included

Tunnel Inspection – Configuration ExampleLab Included

Global Protect Setup exampleLab Included

Getting a free publicly trusted SSL certificate to test Global ProtectLab Included

Setting up global protect for on-demand mode, discover agent settingsLab Included

Global Protect Always on User-Logon and Pre-Logon configurationLab Included

Global Protect HIP CheckLab Included

DDOS Concept Lab Included

DDOS Configuration ExampleLab Included

Installing in Google CloudLab Included

Installing in the AWS CloudLab Included

Installing in Azure CloudLab Included