Palo Alto Firewall Version 11 Essentials Training

Explore how Palo Alto's next generation firewall extends traditional firewalls with App ID, User ID, Content ID, and deep packet inspection to control traffic by application, user, and content.

Palo Alto firewall architecture uses SP3 single pass software and parallel processing hardware with separate control (management) and data planes to accelerate security checks.

Learn to download the EVE-NG community edition version 6.204 from the official site and install it on VMware Workstation Pro, including configuring hardware, ISO boot, and initial web access.

Learn to upload a Palo Alto firewall image to eve-ng using WinSCP, create the proper folder and naming, set permissions, and boot the device with admin/admin after startup.

Export and import ready-made lab topologies into EVE-NG to quickly deploy Palo Alto firewall labs. Learn how to handle professional vs community editions, clouds, IP subnets, and pre-uploaded images.

Learn to configure Active Directory on Windows Server, install Active Directory Domain Services via Server Manager, and promote a server to a domain controller for a test.local forest.

Master the initial configuration of a Palo Alto firewall, using mgmt and console ports, default admin credentials, and cli or graphical setup for physical or virtual devices.

Explain Palo Alto firewall cli access in operational and configuration modes, log in via ssh, telnet, or console, switch with configure, run show, request, and commit commands.

Configure DNS and NTP on the Palo Alto firewall using graphical or CLI approaches. Set primary and secondary DNS and NTP, then adjust hostname, domain, login banner, and time zone.

Configure Palo Alto firewall interfaces to route traffic using physical and virtual interfaces, including subinterfaces, VLANs, loopbacks, tunnels, and SD-WAN, with topology examples.

Create interface management profiles to protect the firewall, defining permitted services and IPs on layer 3 interfaces, subinterfaces, loopback, and VLAN, with a ping-only and a secure management profile.

Configure dual default routes on a Palo Alto firewall for two ISPs, using static routes to 0.0.0.0/0 via interfaces 1/1 and 1/2 with next hops 1.254 and 2.254.

Develop and commit four Palo Alto firewall security policies: LAN to DMZ, LAN to internet, DMZ to internet, internet to DMZ, and verify traffic via monitoring.

Understand network address translation on the Palo Alto firewall, translating private IPs to public addresses for internet access; includes source, destination, and u-turn NAT with static/dynamic IP and port translation.

Explore SSL inspection, decrypting and inspecting encrypted traffic like HTTPS and TLS with a firewall acting as a man-in-the-middle.

Configure decryption policies with ssl forward proxy on a palo alto firewall, applying to lan to dmz or when1/when2 destinations, and create exclusions for government, financial, and shopping sites.

Configure an antivirus security profile AB profile on the HQ firewall, apply it to the LAN-to-internet policy, ensure licenses and updated signatures, then test and verify virus blocking via logs.

Configure a vulnerability protection profile on a Palo Alto firewall v11, attach it to the LAN-to-internet policy, and validate protection via threat monitoring and Kali-based vulnerability tests.

Learn to configure data filtering profiles on Palo Alto firewall, create data patrons (credit card, confidential regex, file properties), and attach them to a DMZ policy for DMZ LAN testing.

Consolidate multiple security profiles into a single security profile group to simplify policy application, enabling one-click assignment of antivirus, anti-spyware, URL filtering, data filtering, and more to security policies.

Block malicious URLs and phishing sites with Palo Alto URL filtering using Bright Cloud or Penn DB. Apply policies to block, allow, or continue with URL categories and logs.

Block malicious URLs with url filtering on Palo Alto firewall via a security policy, applying categories such as adult, extremism, hacking, and malware, then verify with logs and monitors.

Apply a url filtering profile to block malicious urls, configuring categories such as adult, command and control, extremism, malware, phishing, proxy, and peer-to-peer, and verify via logs.

Explore how the application window shows YouTube and Facebook bases, their dependencies and implicit use, ports 80 and 443, and how to enable them in Palo Alto firewall version 11.

Create application filters in Palo Alto Firewall to group apps by category, subcategory, risk level, and tags. Apply these filters in policies to automatically include new apps without manual updates.

Explore how policy optimizer migrates legacy port-based rules to ep id application-based rules in palo alto firewall, through three phases: identify, top-of-rule creation, and monitoring before cleanup.