Palo Alto Networks

📘 Module 1: Getting Started with Palo Alto NGFW

• Introduction to Palo Alto & Next Generation Firewall Concepts
• Palo Alto Lab Setup in EVE-NG
• Understanding Palo Alto Zones
  • Intra-Zone
  • Inter-Zone
• SP3 Architecture and Packet Flow

🔐 Module 2: Security Policy Configuration

• Security Policy Overview
• Basic Security Policy Between Zones
• IP-Based Security Policy Configuration
• Port / Application / Service-Based Policy Implementation

🌐 Module 3: Interface Types and Configuration

• Interface Overview and Use-Cases
  • Layer 3 (L3) Interface
  • Layer 2 (L2) Interface
  • High Availability (HA) Interface
  • TAP Interface
  • Virtual Wire (V-Wire) Interface
  • Tunnel Interface
  • Sub-Interface

🛣️ Module 4: Advanced Routing in Palo Alto

• Virtual Routers (VR) – Concept and Configuration
• Working with Multiple VRs
• Static Routing
• Static Route Summarization
• OSPF Routing
  • Single Area
  • Multiple Areas
• BGP Routing
  • iBGP and eBGP
  • Import & Export Rules
  • BGP Authentication

🔄 Module 5: NAT (Network Address Translation)

• Source NAT – Dynamic & Static
• Destination NAT Configuration
• Source Static NAT Configuration
• U-Turn NAT Configuration and Use-Cases

🧭 Module 6: Routing Policies and Path Control

• Dual-ISP Configuration
• IPSLA (Firewall Path Monitoring)
  • Next-Hop IP Monitoring
  • Far-End IP Monitoring
• Policy-Based Routing (PBR)
• ECMP Configuration (Equal Cost Multipath)
• LLDP Configuration

⚙️ Module 7: Firewall Operations & Management

• Creating and Managing Local Admins
• Role-Based Access Control (L1, L2, L3)
• DNS and NTP Configuration
• Backup and Restore Device Configuration
• Device State Monitoring

🧩 Module 8: Application and Services

• App-ID Technology and Use-Cases
• IP Address and Address Groups
• Service Objects and Service Groups
• Application Groups
• Tags and Metadata for Object Management

🔁 Module 9: Service Route and Integration

• What is Service Route in Palo Alto?
• Service Route Configuration (SRC)
• Syslog Server Integration
• NetFlow Integration
• Active Directory / LDAP Integration (User-ID)
• RADIUS Server Integration (User-ID)

👥 Module 10: Authentication Profiles

• Captive Portal Configuration for User-ID Identification

🧯 Module 11: High Availability (HA)

• Active/Standby HA Setup and Configuration

🕵️‍♂️ Module 12: Security Inspection Policies

• SSL Decryption for Outbound Traffic

🔐 Module 13: VPN Configuration

• Route-Based Site-to-Site VPN Configuration & Troubleshooting
• Policy-Based Site-to-Site VPN Configuration & Troubleshooting

🏁 Bonus: Practical Scenarios & Best Practices

• Hands-on Lab Exercises
• Real-World Use Cases
• Troubleshooting Techniques
• Deployment Best Practices