Khóa Đào Tạo Palo Alto Firewall PCNSA V11

PCNSA Version 11:

Successful completion of this course should enhance the student’s understanding of how to configure and manage Palo Alto Networks next-generation firewalls. The student should learn and get hands-on experience installing, configuring, managing, maintaining and monitoring Palo Alto Networks next-generation firewalls to protect the networks.

PCNSA Course Description:

This training is the most important course as it covers all the fundamentals to understand the Next-Generation Firewall from the ground up. Even experienced firewall engineers take a lot out of this course as it includes, besides the architecture and management essentials, topics like Application Identification, Content ID (IPS, Anti-Virus/-Spyware, URL Filtering, File Blocking), SSL Decryption and User Identification which are all features usually not supported by legacy firewalls.

Outline:

01. Introduction and Initial Configuration

02. Palo Alto Architecture

03. Configuring Initial Firewall Settings

04. Managing Firewall Configurations

05. Interface Configuration

06. Managing Firewall Administrator Accounts

07. Connecting Firewall to Production Networks

08. Security Zones

09. Different Zone Types

10. Creating and Managing Security Policy Rules

11. Creating and Managing NAT Policy Rules

12. App-ID (Application Identity)

13. Security Profiles

14. Objects

15. URL Filtering

16. WildFire

17. User-ID (User Identity)

18. Encryption and Decryption

19. Monitoring and Reporting

20. Backup and Restore

21. Introduction to Panorama

22. Dynamic Updates

Product Versions:

Palo Alto Firewall Version 11.0.0

Objectives:

After completing this course, you should be able to:

o Install and configure new Palo Alto Networks Next-Generation Firewalls.

o Manage the Palo Alto Next-generation Firewall’s configurations.

o Configure the Firewall to connect to your production network.

o Manage the Security Policy Rules used to protect your network.

o Maintain and enhance the configuration of a virtual or logical router.

o Create and apply security zones to policies.

o Maintain firewall configurations.

o Manage Network Address Translation (NAT) Rules.

o Configure and manage Palo Alto Networks next-generation firewalls.

o Configuring, managing, and monitoring a firewall in a lab environment.

o Configure & manage essential features of Palo Alto next-generation firewalls.

o Configure and manage Security and NAT policies to enable approved.

o Configure and manage Threat Prevention strategies to block traffic.

o Configure Policy based on application (App-ID) and user identity (User-ID).

o Configure SSL Decryption on Firewall to inspect & control decrypted sessions.

o Monitor network traffic using the interactive web interface and firewall reports.

Prerequisites:

Students must be familiar with networking concepts, including routing, switching, and IP addressing. Students also should be familiar with basic security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus. Recommended training includes the Firewall Essentials: Configuration and Management (EDU-210) course.

Exam Blueprint:

Management and Services 22%

Managing Objects 20%

Policy Evaluation and Management 28%

Securing Traffic 30%