
Panorama deployment options—physical, virtual, and cloud—cover licenses, management and log collectors, device groups, templates, policy order, onboarding, HA, upgrades, and RBAC.
Panorama centralizes management of multiple Palo Alto firewalls, enabling consolidated policy, central log management, template-based provisioning, and centralized updates across devices.
Manage Palo Alto firewalls and virtual systems as device groups in Panorama, applying shared policies and objects across group members and supporting AWS, GCP, and Azure deployments.
Learn to create and map templates and template stacks in panorama, assign interfaces, virtual routers, zones, and syslog profiles, and push template-driven network settings to firewalls.
Use template variables to build internet and dmz firewalls in DC1 and DC2 labs. Export and import csv files, push template stacks from Panorama, and manage overrides.
Learn how Panorama merges configurations from multiple templates in a template stack, with higher-priority templates taking precedence, and pushes the merged configuration to the firewall.
Panorama modes include Panorama, management only, and log collector only; use device groups and templates, including template stacks, to manage policies, objects, and network settings across firewalls with scope controls.
Learn to audit and compare Panorama configurations by choosing local versus running configs, selecting committed versions, and using color-coded diffs to identify changes during outages.
Palo Alto is a leading Network Security vendor providing next generation Firewalls and other products. Panorama is an offering of Palo Alto for central device and log management of the various Palo Alto products. In this course, we will cover -
1. Panorama's key features, the 3 Panorama modes, deployment options and licensing the Panorama
2. Onboard 4 x Firewalls onto Panorama and then use Panorama features like device groups, templates, template stacks and template variables to build 2 DCs with 2 firewalls in each
3. Understand the Pre and Post rule base on Panorama and how to use those for policy management of managed firewall
4. HA pre-requisites and how to setup Panorama HA across 2 appliances
5. Software upgrade of Standalone Panorama as well as Panorama HA cluster
6. Upgrading managed firewall from Panorama
7. Onboard locally managed firewall into Panorama for central management
8. Remove Panorama managed firewall for local firewall management keeping the Panorama pushed configurations
9. Use of Panorama for Log Management and how to setup Panorama as a local Log collector
10. Configuring the managed firewalls to forward various types of logs like traffic logs, system logs to Panorama
11. Role Based Access Control to Panorama appliance using the dynamic and custom roles to provide different access for different set of users
12. Common issues and ways to troubleshoot along with some useful tips
The course will comprise of theory and lab sessions to cover the above topics wherever possible and applicable