What you'll learn

The Palo Alto Networks Firewall Configuration and Management (EDU-210) course is an instructor-led training that will help you to:

• Configure and manage the essential features of Palo Alto Networks Next-Generation FireWalls
• Configure and manage Security and NAT policies
• Configure and manage Threat Prevention strategies to block known and unknown threats
• Monitor network traffic using the interactive web interface and firewall reports

This training is the most important course as it covers all the fundamentals to understand the Next-Generation FireWall from the ground up. Even experienced firewall engineers take a lot out of this course as it includes, besides the architecture and management essentials, topics like Application Identification, Content ID (IPS, Anti-Virus/-Spyware, URL Filtering, File Blocking), SSL Decryption and User Identification which are all features usually not supported by legacy firewalls. In addition to the official content, we also teach security best practices that will enable students to fully leverage the Palo Alto Networks Next-Generation Firewall’s potential as we not only explain the theory but how to use every feature in real life. Please see the course content for the detailed agenda.

Certification Voucher

The Firewall Configuration and Management (PAN EDU 210) course covers all the content required for the PCNSA “Palo Alto Networks Certified Network Security Administrator” certification. The training includes a voucher to do the PCNSA exam free of charge at any Pearson Vue test centre or via Online proctoring.

What you'll learn

The Palo Alto Networks Panorama: Managing Firewalls at Scale (EDU-220) course is an instructor-led training that will help you to:

• Learn how to design, configure and manage the Panorama FireWall management server
• Gain experience in how to centrally manage policies using device groups
• Learn how to rollout network and device configuration to many FireWalls using templates and template variables
• Gain experience with administration, log collection, as well as logging and reporting
• Become familiar with planning and design considerations for Panorama deployment

This training is a specialised course for the Panorama management solution to centrally manage FireWalls at scale. It not only teaches the features and functionalities of Panorama but also provides guidance on how to design a distributed firewall network that is managed from a central location. Please see the course content for the detailed agenda.

Certification

The Panorama: Managing Firewalls at Scale (EDU-220) course covers parts of the content required for the PCNSE “Palo Alto Networks Certified Network Security Engineer” certification.

The recommended enablement path for the PCNSE certification is first to take the “Firewall: Configuration and Management” (EDU-210) course followed by the Panorama: Managing Firewalls at Scale (EDU-220) and the “Firewall Troubleshooting” (EDU-330) in either order.

What you'll learn

The Palo Alto Networks Prisma SD-WAN: Design and Operations (EDU-238) course describes the next generation Prisma SD-WAN solution, the capability and value it provides over legacy WAN and SD-WAN implementations, and how to configure, operate, and troubleshoot the solution. This course is intended for people who must configure, maintain, and use wide area networks, from data centers, to branches, to the cloud.

Objectives

Successful completion of this five-day, instructor-led course will help enhance your understanding of how to design, implement, and effectively operate a Prisma SDWAN solution. You will get hands-on experience configuring Prisma SD-WAN with a branch and datacenter, configure policies, and use Prisma SD-WAN services.

Please see the course content for the detailed agenda.

Target Audience

Network Engineers, Network Administrators, Network Security Engineers, and NOC Administrators.

Prerequisites

Participants should have: a basic knowledge (1+ years) of routing and switching, including Border Gateway Protocol (BGP), experience deploying and operating WANs, and use of network monitoring tools such as LiveAction, Netscout, and Splunk; experience with DNS, DHCP, and IP management tools; familiarity with scripting and APIs as they relate to network automation.

What you'll learn

The Palo Alto Networks Firewall Troubleshooting (EDU-330) course is an instructor-led training that will help you to:

• Understand the underlying architecture of the Next-Generation FireWall and what happens to a packet when it is being processed
• Investigate networking issues using firewall tools including the CLI
• Follow proven troubleshooting methodologies specific to individual features
• Analyze advanced logs to resolve various real-life scenarios
• Solve advanced, scenario-based challenges

In the Firewall Configuration and Management (EDU-210) training, students will learn everything about how to configure the Next-Generation FireWall. This is all good if things are working, but what if they aren’t? This is what the Firewall Troubleshooting (EDU-330) course is all about — to give network security engineers the tools and techniques they need to effectively troubleshoot any issues related to the Firewall or even to provide proof that the problem is not related to the FireWall. Please see the course content for the detailed agenda.

Certification

The Firewall Troubleshooting (EDU-330) course covers parts of the content required for the PCNSE “Palo Alto Networks Certified Network Security Engineer” certification.

The recommended enablement path for the PCNSE certification is first to take the “Firewall: Configuration and Management” (EDU-210) course followed by the “Panorama: Managing Firewalls at Scale” (EDU-220) and the Firewall Troubleshooting (EDU-330) in either order.

What you'll learn

The Palo Alto Networks Prisma Access SASE Security: Design and Operation (EDU-318) course is an instructor-led training that describes Prisma Access Secure Access Service Edge (SASE). This course is intended for anyone who wants to learn how to secure remote networks and mobile users.

You will learn how to design, implement and operate the Prisma Access solution to better protect mobile users and your IT infrastructure in remote networks using a SASE implementation.

Certification

The Prisma Access SASE Security: Design and Operation (EDU-318) course is not linked to any Palo Alto Networks certification.

What you'll learn

The Palo Alto Networks Cortex XDR: Prevention, Analysis, and Response (EDU-260) course for advanced endpoint protection and remediation is an instructor-led training that will help you to:

• Differentiate the architecture and components of the Cortex XDR family
• Activate XDR, deploy the agents, and work with the management console
• Work with the management console, describe a typical management page and work with the tables and filters
• Create agent installation packages, endpoint groups, policies, and profiles
• Create and manage exploit and malware profiles, and perform response actions
• Differentiate BIOC and IOC rules, and create and manage them
• Describe the Cortex XDR causality analysis and analytics concepts
• Triage and investigate alerts and incidents, and create alert starring and exclusion policies
• Work with the Causality and Timeline Views and investigate threats in the Query Center
• Enable the Host Insights add-on and work with the insights and the Asset View
• Use Vulnerability Assessment, and work with the Asset Management and the IP View

The Cortex XDR course teaches students how the agent protects against exploits and malware-driven attacks. In hands-on lab exercises, students will explore and configure the management platform and install XDR agent as well as relevant components; create security policies and profiles to protect endpoints against multi-stage, fileless attacks built using malware and exploits; respond to attacks using response actions; understand behavioural threat analysis, log stitching, agent-provided enhanced endpoint data, and causality analysis; investigate and triage attacks using the incident management page and analyze alerts using the Causality and Timeline analysis views; use API to insert alerts; create BIOC rules, and search a lead in raw data sets in Cortex Data Lake using the Query Builder. Please see the course content for the detailed agenda.

Certification

The Cortex XDR: Prevention, Analysis, and Response (EDU-260) course is not linked to any Palo Alto Networks certification.

What you'll learn

The Palo Alto Networks Cortex XDR: Investigation and Response (EDU-262) instructor-led course teaches you how to use the Incidents pages of the Cortex XDR management console to investigate attacks. It explains causality chains, detectors in the Analytics Engine, alerts versus logs, log stitching, and the concepts of causality and analytics. You will learn how to analyze alerts using the Causality and Timeline Views and how to use advanced response actions, such as remediation suggestions, the EDL service, and remote script execution. Multiple modules focus on how to leverage the collected data. You will create simple search queries in one module and XDR rules in another. The course demonstrate how to use specialized investigation views to visualize artifact-related data, such as IP and Hash Views. Additionally, it provides an introduction to XDR Query Language (XQL). The course concludes with Cortex XDR external-datacollection capabilities, including the use of Cortex XDR API to receive external alerts.

Please see the course content for the detailed agenda.

Target Audience

• Cybersecurity analysts and engineers
• Security operations specialists

Certification

The Cortex XDR: Investigation and Response (EDU-262) course is not linked to any Palo Alto Networks certification.

What you'll learn

The Cortex™ XSOAR 6.2: Automation and Orchestration (EDU-380) course is four days of instructor-led training that will help you: Ÿ

• Configure integrations, create tasks, and develop playbooks
• Build incident layouts that enable analysts to triage and investigate incidents efficiently
• Identify how to categorize event information and map that information to display fields
• Develop automations, manage content, indicator data, and artifact stores, schedule jobs, organize users and user roles, oversee case management, and foster collaboration

This training is designed to enable a SOC, CERT, CSIRT, or SOAR engineer to start working with Cortex XSOAR integrations, playbooks, incident-page layouts, and other system features to facilitate resource orchestration, process automation, case management, and analyst workflow. The third module of the course demonstrates a complete playbook-development process for automating a typical analyst workflow to address phishing incidents. This end-to-end view of the development process provides a framework for more focused discussions of individual topics that are covered in subsequent modules. Please see the course content for the detailed agenda.