Aron Mesterbasic
During the course, your expert instructor will work through the course material preparing for the PCNSA exam as well as the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification.
Your course package is designed to provide maximum learning and convenience. This is included in the price of your course:
Your expert instructor will get you ready for the following exam and certification, which are included in your course package and covered by the Certification guarantee.
Students must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students also should be familiar with basic security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.
Using our engaging learning methodology including a variety of tools, we’ll cover the entire curriculum.
Module 1: Next Generation Security Platforms and Architecture
- Security platform overview
- Next-generation firewall architecture
- Zero Trust security model
- Public cloud security
- Firewall offerings
Module 2: Virtual and Cloud Deployment
- VM-Series Firewall
- Cloud Overview
- Cloud Infrastructure
- Public Cloud Use Case: AWS
Module 3: Initial Configuration
- Administrative Controls
- Initial System Access
- VM-Series Initial Configuration
- Configuration Management
- Licensing and Software Updates
- Account Administration
- Viewing and Filtering Logs
Module 4: Interface Configuration
- Security zones and interfaces
- Tap interfaces
- Virtual Wire interfaces
- Layer 2 interfaces
- Layer 3 interfaces
- Virtual routers
- VLAN interfaces
- Loopback interfaces
- Policy-based forwarding
Module 5: Security and NAT Policies
- Security policy fundamental concepts
- Security policy administration
- Network Address Translation
- Source NAT configuration
- Destination NAT configuration
Module 6: App-ID
- Application Identification (App-ID) overview
- Using App-ID in a Security policy
- Identifying unknown application traffic
- Updating App-ID
Module 7: Content-ID
- Content-ID overview
- Vulnerability Protection Security Profiles
- Antivirus Security Profiles
- Anti-Spyware Security Profiles
- File Blocking Profiles
- Attaching Security Profiles to Security policy rules
- Telemetry and threat intelligence
- Denial of service protection
Module 8: URL Filtering
- URL Filtering Security Profiles
- Attaching URL Filtering Profiles
Module 9: Decryption
- Decryption concepts
- Certificate management
- SSL Forward Proxy decryption
- SSL Inbound Inspection
- Other decryption topics:
- Unsupported applications
- No decryption
- Decryption port mirroring
- Hardware security modules
- Troubleshooting SSL session terminations
Module 10: WildFire™
- WildFire concepts
- Configuring and managing WildFire
- WildFire reporting
Module 11: User-ID
- User-ID overview
- User mapping methods overview
- Configuring User-ID
- PAN-OS® Integrated agent configuration
- Windows-based agent configuration
- Configuring group mapping
- User-ID and Security policy
Module 12: GlobalProtect
- GlobalProtect overview
- Preparing the firewall for GlobalProtect
- Configuration: GlobalProtect Portal
- Configuration: GlobalProtect Gateway
- Configuration: GlobalProtect agents
Module 13: Site-to-Site VPN's
- Site-to-site VPN
- Configuring site-to-site tunnels
- IPsec troubleshooting
Module 14: Monitoring and Reporting
- Dashboard, ACC, and Monitor
- Log forwarding
- Syslog
- Configuring SNMP
Module 15: Active/Passive High Availability
- HA components and operation
- Active/passive HA configuration
- Monitoring HA state
Module 16: Next Generation Security Practices
- Migration Guidelines
- Analyzing ACC Information
- Optimizing Security Profiles
- Heatmap and Best Practice Assessment (BPA)
The Virtual Classroom is an online room, where you will join your instructor and fellow classmates in real time. Everything happens live and you can interact freely, discuss, ask questions, and watch your instructor present on a whiteboard, discuss the courseware and slides, work with labs, and review.
Yes, you can sit exams from all the major Vendors like Microsoft, Cisco etc from the comfort of your home or office.
With Readynez you do any course form the comfort of your home or office. Readynez provides support and best practices for your at-home classroom and you can enjoy learning with minimal impact on your day-to-day life. Plus you'll save the cost and the environmental burden of travelling.
Well, learning is limitless, when you are motivated, but you need the right path to achieve what you want. Readynez consultants have many years of experience customizing learner paths and we can design one for you too. We are always available with help and guidance, and you can reach us on the chat or write us at info@readynez.com.