Firewall: Improving Security Posture and Hardening PAN-OS (EDU-214) [PAN-EDU-214]

OVERVIEW

The Palo Alto Networks “Firewall: Improving Security Posture and Hardening PAN-OS” (EDU-214) course is an instructor-led training that will help you to:

• Determine the efficacy of your current security policies
• Develop workflows for managing your security posture
• Modify your existing policy set to implement Security Best Practices
• Monitor network traffic using the interactive web interface and firewall reports
• Utilize tools such as the BPA tool to understand your environment further

This course enables you to effectively secure your enterprise network by leverage the full potential of the Next-Generation FireWall. Most firewall infrastructures have been migrated from a legacy firewall. However, such a like-for-like migration does not protect the network as it is missing the correct setup of all the threat prevention techniques offered by the Next-Generation FireWall. Implementing security best practice can be a serious challenge as it is often difficult to identify where to start and what combination of best practice is adequate for the environment. Therefore, the “Firewall: Improving Security Posture and Hardening PAN-OS” (EDU-214) course teaches not only security best practices but also the methodologies to apply them with minimal impact effectively.

Remark 1: This Palo Alto training will be delivered in 3 full-day sessions or 5 half-day sessions.

Remark 2: This lecture training includes hands-on lab exersis.

OBJECTIVES

Successful completion of this three-day, instructor-led course will help the student manage and maintain a Palo Alto Networks firewall-protected environment. The student will learn how to improve non-greenfield environments and will be better equipped to ensure that configurations match security best practice. The student will also be able to develop an operational strategy for maintaining a high level of compliance.

AUDIENCE

• Security Engineers
• Security Administrators
• Security Operations Specialists
• Security Analysts
• Support Staff

CERTIFICATION

Recommended as preparation for the following exams:

• There are no exams aligned to this course.

CONTENT

Module 1: Introduction

Module 2: Security Profile Revision

Module 3: Daily Operations and Maintenance

Module 4: Establish Initial Baseline Visibility

Module 5: Analyze and Update Security Rules Passing Traffic

Module 6: Inbound Security Rules Best Practices and Analysis

Module 7: Outbound Security Rules Best Practices and Analysis

Module 8: Internal Security Rules Best Practices and Analysis

Module 9: Administratively Hardening PAN-OS

Module 10: Reducing Policy set and Simplification