PAN11 Firewall Essentials

Configure, manage, and monitor Palo Alto Networks next-generation firewalls through hands-on labs. Aligned with the PCNSA certification.

Cybersecurity Networking Palo Alto Networks

About this course

Course Details

In the PAN11 Firewall Essentials labs, you'll configure, manage, and monitor Palo Alto Networks next-generation firewalls in a lab environment. Topics include security policies, NAT configuration, SSL decryption, URL filtering, and firewall monitoring.

This offering is labs only. See the link below for course content options.

Palo Alto Networks Learning Center

What you'll learn

01 Configure Palo Alto Networks firewall security policies and NAT rules
02 Implement App-ID, User-ID, and Content-ID for granular traffic control
03 Deploy URL filtering, threat prevention, and WildFire malware analysis profiles
04 Manage PAN-OS firewall interfaces, zones, and virtual routers
05 Configure site-to-site VPN and GlobalProtect remote access
Course outline
Labs 14 items
Lab 01: Configuring Initial Firewall Settings
Lab 02: Managing Firewall Configurations
Lab 03: Managing Firewall Administrator Accounts
Lab 04: Connecting the Firewall to Production Networks with Security Zones
Lab 05: Creating and Managing Security Policy Rules
Lab 06: Creating and Managing NAT Policy Rules
Lab 07: Controlling Application Usage with App-ID
Lab 08: Blocking Known Threats Using Security Profiles
Lab 09: Blocking Inappropriate Web Traffic with Advanced URL Filtering
Lab 10: Blocking Unknown Threats with WildFire
Lab 11: Controlling Access to Network Resources with User-ID
Lab 12: Using Decryption to Block Threats in Encrypted Traffic
Lab 13: Locating Valuable Information Using Logs and Reports
Lab 14: Capstone

What's in this course

Lab Exercises

Prerequisites

  • Completion of Network Security Fundamentals or equivalent networking knowledge
  • Basic understanding of TCP/IP, routing, and firewall concepts
  • Familiarity with general cybersecurity principles

Best for

  • Network and security professionals learning Palo Alto Networks firewall administration
  • Professionals preparing for the Palo Alto Networks PCNSA certification
  • IT staff responsible for configuring and managing next-generation firewalls
  • Learners who completed foundational Palo Alto Networks courses
Certification

This course aligns to the Palo Alto Networks Certified Network Security Administrator (PCNSA) certification. The PCNSA validates the ability to configure, manage, and monitor Palo Alto Networks next-generation firewalls.

Resources & support

NDG Online provides technical support specifically related to the functionality of the lab environment only. Any questions or concerns regarding the learning material or lab content must be directed to your instructor. Self-paced learners who find they require additional support are encouraged to seek out a course at a local academic institution.


Support Center

Common questions

Does this course prepare me for the PCNSA exam?

The course aligns with the Palo Alto Networks PCNSA certification. You configure security policies, App-ID, VPNs, and threat prevention on PAN-OS 11 in live labs.

Do I work with a real firewall?

The labs run a live PAN-OS environment in your browser. You configure the same interfaces, zones, and policies used on production firewalls, with nothing to install.

How long do I have access?

Standard access runs 6 months. Learners with an academic (.edu) email can choose 6- or 9-month access at reduced pricing.