Extended Firewall Management

PA LO A LT O NE T WO R K S : E x t e n d e d F i r e wa l l Ma n a g e me n t
OVERVIEW
Extended Firewall Management is the next-level follow-on course to Palo Alto
Networks

Installation, Confguration, and Management (PAN-EDU-201).

Extended Firewall Management expands on 201 course topics, while introducing
many new features and functions of Palo Alto Networks Next-Generation frewalls.
COURSE OBJECTIVES
Successful completion of this two-day, instructor-led course will enhance the
students understanding of how to install, confgure, manage, and perform basic
troubleshooting on the entire line of Palo Alto Networks Next-Generation
frewalls.
Additionally, students will be instructed on the basics of implementing and managing
GlobalProtect and Active/Active High Availability. Students will gain an in-depth
knowledge of how to optimize their visibility and control over applications, users,
and content.
SCOPE
nCourse level: Introductory
nCourse duration: 2 Days
nCourse format: Combines Instructor-led and hands-on labs
nPlatform support: All Palo Alto Networks next-generation frewall
models running PAN-OS.
TARGET AUDIENCE
Security Engineers, Network Engineers, and Support staff
PREREQUISITES:
Completion of Firewall Installation, Confguration, and Management (201)
or equivalent experience is highly recommended.
Students must have a basic familiarity with networking concepts including
routing, switching, IP addressing, and basic port-based security concepts.

I
n
s
t
r
u
c
tor-Facilit
a
t
e
d

H
a
n
d
s-On L
a
b
s

D
e
m
onstratio
n
s

COURSE OUTLINE:
Day 1
Module 0: Overview
Module 1: Platforms & Architecture
n Hardware Platforms
n Control and Data Planes
n Logic Flow
Module 2: Administration & Management
n Password Management
n Certifcate Management
n Log Forwarding
Module 3: Interface Confguration
n VLAN Objects
n QoS

Module 4: Layer 3
n NAT
n Policy Based Forwarding
n Routing Protocols (OSPF)
Module 5: App-ID

n Defning new Application Signatures

n Application Override
Day 2
Module 6: Content-ID

n Custom Threat Signatures

n Data Filtering
n DoS Protection
n Botnet Report
Module 7: User-ID

n Captive Portal
n Terminal Server Agent
n XML API
n Dynamic Address Objects
Module 8: GlobalProtect

n Implementation of GlobalProtect
n Install and Confgure Portal,
Gateway, and Agents
Module 9: Mobile Security Manager
n GP-100 Overview
n GP-100 Server Confguration
n Managing Mobile Devices
Module 10: High Availability
n Confguring Active/Active HA
ORDERING INFORMATION:
PART NUMBER: PAN-EDU-205
4401 Great America Parkway
Santa Clara, CA 95054
Main: +1.408.753.4000
Sales: +1.866.320.4788
Support: +1.866.898.9087
www.paloaltonetworks.com
Copyright 2014, Palo Alto Networks, Inc. All rights reserved. Palo Alto Networks,
the Palo Alto Networks Logo, PAN-OS, App-ID and Panorama are trademarks of
Palo Alto Networks, Inc. All specications are subject to change without notice.
Palo Alto Networks assumes no responsibility for any inaccuracies in this document
or for any obligation to update information in this document. Palo Alto Networks
reserves the right to change, modify, transfer, or otherwise revise this publication
without notice. PAN_DS_EDU-205_022614