Next-Generation Firewalls

PA LO A LT O NE T WO R K S : F i r e wa l l s E d u c a t i o n D a t a s h e e t
OVERVIEW
Successful completion of this three-day, instructor-led course will enable the
student to install, confgure, and manage the entire line of Palo Alto Networks
Next-Generation frewalls.
COURSE OBJECTIVES
Students attending this introductory-level class will gain an in-depth knowledge
of how to install, confgure, and manage their frewall, as well as confguration
steps for the security, networking, threat prevention, logging, and reporting
features of the Palo Alto Networks Operating System.
SCOPE
nCourse level: Introductory
nCourse duration: 3 Days
nCourse format: Combines lecture with hands-on labs
nPlatform supported: All Palo Alto Networks next-generation frewall models
TARGET AUDIENCE
Security Engineers, Network Engineers, and Support staff
PREREQUISITES:
Students must have a basic familiarity with networking concepts including
routing, switching, and IP addressing. Students should also be familiar with basic
port-based security concepts. Experience with other security technologies (IPS,
proxy, and content fltering) is a plus.

I
n
s
t
r
u
c
tor-Facilit
a
t
e
d

H
a
n
d
s-On L
a
b
s

D
e
m
onstratio
n
s

COURSE OUTLINE:
Day 1
Module 0: Course Overview
Module 1: Platforms and Architecture
n Single Pass Architecture
n Control Plane and Data Plane
n Flow Logic
Module 2: Administration & Management
n GUI, CLI, and API
n Confg Management
n PAN-OS & Software Update
Module 3: Interface Confguration
n Layer 2, Layer 3, Virtual Wire, Tap
n Sub-interfaces
n Security Zones
Day 2
Module 4: Layer 3 Confguration
n Interface Management
n Service Routes
n DHCP
n Virtual Routers
n NAT (source and destination)
n IPv6 Overview
Module 5: App-ID

n App-ID Process
n Security Policy Confguration
n Policy Administration
Module 6: Content-ID

n Antivirus
n Anti-spyware
n Vulnerability
n URL Filtering
n File Blocking: WildFire

n Zone Protection
Module 7: Decryption
n SSL Inbound and Outbound
Day 3
Module 8: User-ID

n User-ID Agent
n Enumerating Users
n Mapping Users to IP
n Users in Security Policy
Module 9: VPN
n IPsec
n GlobalProtect

Overview
Module 10: High Availability
n Confguring Active/Passive HA
Module 11: Panorama
n Device Groups & Templates
n Shared Policy
n Confg Management
n Reporting and Log Collection
ORDERING INFORMATION:
PART NUMBER: PAN-EDU-201
4401 Great America Parkway
Santa Clara, CA 95054
Main: +1.408.753.4000
Sales: +1.866.320.4788
Support: +1.866.898.9087
www.paloaltonetworks.com
Copyright 2014, Palo Alto Networks, Inc. All rights reserved. Palo Alto Networks,
the Palo Alto Networks Logo, PAN-OS, App-ID and Panorama are trademarks of
Palo Alto Networks, Inc. All specications are subject to change without notice.
Palo Alto Networks assumes no responsibility for any inaccuracies in this document
or for any obligation to update information in this document. Palo Alto Networks
reserves the right to change, modify, transfer, or otherwise revise this publication
without notice. PAN_DS_EDU-201_030514