• Configure and manage the essential features of Palo Alto Networks next-generation firewalls
• Configure and manage Security and NAT policies to enable approved traffic to and from zones
• Configure and manage Threat Prevention strategies to block traffic from known and unknown IP addresses, domains, and URLs
• Monitor network traffic using the interactive web interface and firewall reports

• Palo Alto Networks Portfolio and Architecture
• Configuring Initial Firewall Settings
• Managing Firewall Configurations
• Managing Firewall Administrator Accounts
• Connecting the Firewall to Production Networks with Security Zones
• Creating and Managing Security Policy Rules
• Creating and Managing NAT Policy Rules
• Controlling Application Usage with App-ID
• Blocking Known Threats Using Security Profiles
• Blocking Inappropriate Web Traffic with URL Filtering
• Blocking Unknown Threats with Wildfire
• Controlling Access to Network Resources with User-ID
• Using Decryption to Block Threats in Encrypted Traffic
• Locating Valuable Information Using Logs and Reports
• What’s Next in Your Training and Certification Journey

Appendix A – Securing Endpoints with GlobalProtect

Appendix B – Providing Firewall Redundancy with High Availability

Appendix C – Connecting Remotes Sites using VPNs

Appendix D – Configuring User-ID Windows Agent

• Security Engineers, Security Administrators, Security Operations Specialists, Security Analysts, and Support Staff

• Participants must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students also should be familiar with basic security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.