PCNSE Online Training

سرفصل های دوره

This intermediate Palo Alto PCNSE training prepares learners to take the PCNSE exam, which is the one required exam to earn the Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.

The Palo Alto Certified Network Security Engineer (PCNSE) is Palo Alto’s highest level of certification for security professionals working on Palo Alto’s Security Operating Platform. Best attempted with years of experience, the certification requires deep knowledge of designing, deploying, configuring, maintaining and troubleshooting nearly all Palo Alto platform implementations. When an organization needs a next-generation firewall deployed while maintaining the access and availability of the rest of their platform, they need a PCNSE. Security professionals aren’t the only ones who can benefit from this training, though: customers, partners, systems engineers, systems integrators and support engineers can all benefit from understanding how the proper maintenance of firewalls affects the entire network.

1. Building a Palo Alto PCNSE Lab

1. Building a Palo Alto PCNSE Lab

2. Lab Overview and Design

3. Initialize the Firewall

4. Configure the L3 Interfaces

5. Configure DHCP Services

6. Configure Security Policy Rules

7. Configure NAT Policy Rules

8. Configure a Default Route

9. Test and Troubleshoot

2. Configuring PA FW High Availability

1. Intro to PA Firewall High Availability

2. HA Overview

3. Game Plan for HA

4. Configure HA Interfaces

5. Configure Active FW HA

6. Configure the Passive FW HA

7. Test and Verify HA

8. Configure HA Link Monitoring

9. Configure HA Path Monitoring

3. Using Template Stacks with Panorama

1. Intro to Panorama and Template Stacks

2. Panorama and Template Stacks Overview

3. Onboard FWs to Panorama

4. Creating Templates

5. Create and Associate Template Stacks with FWs

4. Using Device Groups with Panorama

1. Intro to Device Groups

2. Device Groups Overview

3. Add FWs to Panorama

4. Configure Templates

5. Configure Device Groups

6. Configure Objects in Device Groups

7. Configure DG Policy Rules

5. Managing FWs with Panorama

1. Intro to Managing FWs with Panorama

2. Overview of Using Panorama to Manage FWs

3. Importing FW Configurations

4. Managing Log Collection

5. Scheduled Pushes and Exports

6. Auto Recovery, Dynamic Updates, and Health Checks

7. Role-based Panorama Management

6. Managing PA FW Digital Certificates

1. Intro to Managing Palo Alto FW Digital Certificates

2. Decryption Strategies Overview

3. Decryption Game Plan

4. Setting Up a Local Trusted CA

5. Setting Up a Digital Cert for FW Management

6. Setting Up Digital Certs for SSL Forward Proxy

7. Setting Up Digital Certs for SSL Inbound Inspection

8. Using a Cert for FW Management

9. Using a Cert for Panorama Mgmt

7. Enforcing Palo Alto FW User-ID

1. Intro to User-ID

2. User-ID Overview

3. Enable User-ID and Setup the Agent

4. Redistribute User-ID Mappings

5. Using User-ID in Policy

6. Enable User-ID Group Mappings

8. Configure PA FW Admin Authentication

1. Intro to Palo Alto FW Admin Authentication

2. Admin Authentication and Authorization Overview

3. Configure Server Profiles for Central Authentication

4. Create Authentication Profiles

5. Setting Up an Authentication Sequence

6. Creating Admin Roles

7. Create Admin Accounts

8. Using Panorama

9. Implement Routing on PA FWs

1. Intro to PA FW Routing

2. Routing Overview

3. Enable Advanced Routing

4. Static Routes and Path Monitoring

5. Equal Cost Multiple Path (ECMP)

6. Dynamic Routing

7. Policy-Based Forwarding (PBF)

8. Service Routes

9. Using Panorama to Configure Routing

10. Configure PA FW QoS

1. Intro Palo Alto FW Quality of Service

2. Palo Alto QoS Overview

3. QoS Game Plan

4. Create QoS Policy Rules

5. Create a QoS Profile

6. Enable QoS on Egress Interfaces

7. Using QoS Real Time Stats

8. Prioritizing Traffic Based on IP Header ToS - Palo Alto Networks Certified Network Security Engineer (PCNSE) CBT Nuggets-2

11. Implementing PA FW L2 Interfaces

1. Layer 2 Sub-Interfaces Game Plan

2. Configure Layer 2 Sub-Interfaces

12. Using PA FW Zone, Vulnerability, And DoS Protection

1. Intro to Palo Alto Zone, Vulnerability, and DoS Protection

2. Zone, DoS, And Vulnerability Protection Overview

3. Create a Vulnerability Protection Profile

4. Testing the Vulnerability Protection Profile

5. Create a Zone Protection Profile

6. Testing the Zone Protection Profile

7. Create a DoS Profile and Policy

8. Testing DoS Profiles and Policy

13. Implementing PA FW Virtual Wires

1. Testing Multiple VLAN VWires

2. Using Address Translation with a VWire

14. Configuring GlobalProtect Remote Access VPNs

1. Intro to Remote Access VPNs Using GlobalProtect

2. GlobalProtect Remote Access VPN Overview

3. Game Plan for GlobalProtect Remote Access VPNs

4. Certificate Setup for GlobalProtect

5. Verify LDAP

6. Zone and Interface Setup for GlobalProtect

15. Implementing Palo Alto FW App-ID

1. Security Policies with App-ID

2. Application Filters

3. Moving to App-ID

4. Custom App-IDs and Overrides

5. Dynamic Updates

16. Configure PA FW Source and Destination NAT

1. Configuring SNAT DIP

2. Configuring SNAT DIPP and No-NAT Policies

3. Destination NAT Game Plan

4. Configuring DNAT 1 to 1 Mapping

5. Configure DNAT Port Redirection

17. Configure PA FW VLAN, TAP, and Aggregate Interfaces

1. TAP Interface Overview

2. TAP Interface Configuration

3. VLAN Interface Overview

4. Configure VLAN Interfaces

5. Test VLAN Interfaces

6. Aggregate Ethernet Interfaces

7. Verify the Aggregate Interface

18. Configuring PA FW Decryption Services

1. Intro to Configuring PA FW Decryption Services

2. Implement SSL Forward Proxy

3. Verify SSL Forward Proxy

3. Verify SSL Inbound Inspection

4. Implement SSL Inbound Inspection

6. Problems with SSH and Tunneling

7. Configure SSH Proxy

19. Configure Static PA FW S2S VPNs

1. Intro to Static Site-to-Site IPsec VPN Tunnels

2. Site-to-Site VPN Overview

3. Create a Tunnel Interface

4. Create Network Profile for IKE

5. Create Network Profile for IPsec

6. Create Network Profile for IKE Gateway

7. Create IPsec Tunnel

8. Configure Routing for IPsec S2S VPNs

9. Security Policies for IPsec S2S VPN

10. Using Panorama for S2S VPN

11. Verifying the IPsec Site to Site VPN

20. Using PA FW S2S VPNs with Certificates

1. Intro to IPsec S2S VPNs using Certificates

2. Overview of IPsec S2S VPNs using Certificates

3. Game Plan for S2S VPNs using Certificates

4. Certificates and Certificate Profiles

5. Create a Tunnel Interface

6. Create Network Profile for IKE

7. Create Network Profile for IPsec

8. Create Network Profile for IKE Gateway

9. Create IPsec Tunnel

10. Configure OSPF for IPsec S2S VPNs

11. Security Policies for IPsec S2S VPN

21. Configure an IPsec VPN PA FW to Cisco

1. Overview of IPsec S2S Between Palo Alto and Cisco

2. Game Plan for IPsec VPN Between Palo Alto and Cisco

3. Create a Tunnel Interface -3

4. Create Network Profile for IKE and IPsec

5. Create Network Profile for IKE Gateway -3

6. Create the IPsec Tunnel

7. Routing Through the Tunnel Interface

8. Security Policies for IPsec S2S VPN -3

9. Test and Verify IPsec VPN

10. Intro to IPsec VPNs Between Palo Alto FW and Cisco

22. Using LSVPNs with GlobalProtect

1. Intro to Palo Alto FW Large Scale VPNs (LSVPN)

2. LSVPN Overview

3. LSVPN Game Plan

4. Confirm Certificates on GW, Portal, and Satellite

5. Configure FW18 as Gateway for LSVPN

6. Configure FW18 as Portal for LSVPN

7. Configure FW19 as Satellite for LSVPN

23. Using PA FW AV And WildFire

1. Intro to Palo Alto Networks WildFire

2. WildFire Overview

3. Verify Initial Settings for WildFire

4. Using an Antivirus Profile

5. Using a Decryption Policy

6. Include a WildFire Analysis Profile

7. Verifying WildFire Analysis

8. Additional Tips for Dealing with Threats

24. Using Palo Alto ZTP

1. Intro to Palo Alto Zero Touch Provisioning

2. Zero Touch Provisioning Overview

3. ZTP Game Plan

4. Installing the ZTP Panorama Plugin

5. Confirm Panorama Device Certificate

25. Troubleshooting PA FW Routing

1. Intro to Troubleshooting PA FW Routing

2. Troubleshooting Routing Overview

3. Troubleshooting RIP

4. Setting Up GRE Tunnels

5. Configuring and Troubleshooting RIP

6. Troubleshooting OSPF

7. Troubleshooting BGP

8. Troubleshooting Static Routes

26. Using PA FW Dynamic Groups

1. Intro to PA FW Dynamic Groups

2. Dynamic Groups Overview

3. Game Plan for Dynamic Address Group (DAG)

4. Create a Log Forwarding Profile

5. Create a Dynamic Address Group (DAG)

6. Game Plan for Dynamic User Group

7. Dynamic User Group Configuration

8. Verifying DUG

9. Decryption Troubleshooting with DUG

27. Troubleshooting PA FW NAT

1. Game Plan for Overlapping IPs

2. Configure SNAT and DNAT on FW18

3. Configure SNAT and DNAT on FW19

4. Configure Routing for Overlapping Subnets

5. Configure Security Policy - Palo Alto Networks Certified Network Security Engineer (PCNSE) 5. CBT Nuggets-1

28. Troubleshooting PA FW IPsec VPNs

1. IPsec VPN Troubleshooting Overview

2. IPsec Tunnel Troubleshooting Game Plan

3. Configure IPsec Between FW18 and R11

4. Testing IPsec from FW18 to R11

5. Configure IPsec Between FW18 to FW19

6. Testing FW18 to FW19

7. Configure IPsec from FW19 to R22

8. Testing IPsec from FW19 to R22

9. Adding Dynamic Routing

10. Troubleshooting Routing Over IPsec

11. Updating Security Policies for IPsec

29. Troubleshooting PA FW Decryption

1. Verify Decryption Port Mirroring

2. Modify Decryption Policy

3. Using the ACC And Logs for Troubleshooting

4. Troubleshooting QUIC

5. Intro to Troubleshooting PA FW Decryption

6. Troubleshooting Decryption Overview

7. Troubleshooting SSL Forward Proxy

8. Configure Decryption Port Mirroring

30. Using PA FW Anti-Spyware

1. Intro to Palo Alto Anti-Spyware

2. Anti-Spyware Overview

3. Tunneling Example

4. Blocking Malicious IPs

5. URL Filtering for C2

6. Filtering Proxy Web Sites

7. Creating an Anti-Spyware Profile

8. Verifying Anti-Spyware Results

31. Using IPv6 with PA FWs

1. Intro to Using IPv6 with Palo Alto Firewalls

2. IPv6 Overview

3. Game Plan for IPv6

4. Verify ISP Configuration

5. Enable IPv6 on FW18

6. Testing IPv6 on FW18

7. Enable IPv6 on FW19

8. IPv6 Routing

9. Security Policy for IPv6

32. Using Palo Alto FW Authentication Portal

1. Intro to Authentication Portal

2. Authentication Portal Overview

3. Verify User-ID

4. Setting up Certificates for Authentication Portal

5. Authentication Portal Settings

6. Interface Management Profile

7. Authentication Policy Rules

8. Verify Authentication Portal

9. Multi Factor Authentication

“کورس CISSP : دامنه 3 معماری و مهندسی امنیت” به سبد خرید شما اضافه شد. مشاهده سبد خرید

“کورس CISSP : دامنه 6 ارزیابی و تست امنیتی” به سبد خرید شما اضافه شد. مشاهده سبد خرید

179,000 تومان

افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: CBT Nuggets