Palo Alto Networks Next Generation Firewalls Course PANEDU201 – Lexington, MA

Course Number: PANEDU201

Cost: $ 3000.00

If you wish to pay via VOUCHER OR PURCHASE ORDER, please email your order information to


Successful completion of this three-day, instructor-led course will enable the student to install, configure, and manage the entire line of Palo Alto Networks® Next-Generation firewalls.

Course Objectives:
Students attending this introductory-level class will gain an in-depth knowledge of how to install, configure, and manage their firewall, as well as configuration steps for the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System.

  • Course level: Introductory
  • Course duration: 3 Days
  • Course format: Combines lecture with hands-on labs
  • Platform supported: All Palo Alto Networks next-generation firewall models

Day 1

    Module 0:  Course Overview

    Module 1:  Platforms and Architecture

  • Single Pass Architecture
  • Control Plane and Data Plane
  • Flow Logic

    Module 2:  Administration & Management

  • GUI, CLI, and API
  • Config Management
  • PAN-OS & Software Update       

     Module 3:  Interface Configuration

  • Layer 2 & 3, Virtual Wire, Tap
  • Sub-Interfaces
  • Security Zones

Day 2

      Module 4: Layer 3 Configuration

  • Interface Management
  • Service Routers
  • DHCP
  • Virtual Routers
  • NAT (Source & Destination)
  • IPv6 Overview

       Module 5: App-ID

  • App-ID Process
  • Security Policy Configuration
  • Policy Administration

       Module 6: Content ID

  • Antivirus
  • Anti-spyware
  • Vulnerability
  • URL Filtering
  • File Blocking Wildfire
  • Zone Protection

       Module 7: Decryption

  • SSL Inbound & Outbound

Day 3

       Module 8:  User-ID

  • User-ID Agent
  • Enumerating Users
  • Mapping Users to IP
  • Users in Security Policy

       Module 9:  VPN

  • IPsec
  • Global Protect Overview

       Module 10:  High Availability

  • Configuring Active / Passive HA

       Module 11:  Panorama

  • Device Groups & Templates
  • Shared Policy
  • Config Management
  • Reporting and Log Collection


Target Audience:

Security Engineers, Network Engineers, and Support staff


Prerequisites:Students must have a basic familiarity with networking concepts including routing, switching, and IP addressing. Students should also be familiar with basic port-based security concepts. Experience with other security technologies (IPS, proxy, and content filtering) is a plus.