PaloAlto Firewall (PCNSE)

What learn

Understand Palo Alto Firewalls Deployment Methods

Understand Palo Alto Firewalls Security Policies

Understand Palo Alto Firewalls NAT configuration

Understand the packet flow through the PaloAlto Firewalls

Configure Captive Portal to authenticate users

Configure user ID & LDAP integration using User ID Agent Configure Captive Portal to authenticate users Underst

Course Content

28 sections • 170 lectures • 68h 50m total length

01. PA FLOW LOGIC Part 1	preview	203min
02. PA-FLOW LOGIC PART 2		211min
03. Bonous Video--Paloalto Architecture Model		15:48min

001.How to access Paloalto Firewall via Console cable & GUI mode Part 1		41:49min
002. How to access Paloalto Firewall via Console cable & GUI mode Part 2		14:03min
003. How to change management ip address via CLI & GUI		27:42min
004. General Setting of Paloalto		09:59min
005. How to Access(configure) Paloalot firewall via console or GUI		15:29min
006. How to change Management IP Address via cli or GUI		09:38min
007. General Settings of Paloalto	preview	10:10min
008. Register firewall, licenses. software & dynamic update		26:00min

	001. Types of Administrator Roles in Paloalto Part 1		23:15min
	002. Types of Administrator Roles in Paloalto Part 2		34:39min
	003. Administrator Roles and create new users Part1		06:13min
	004. Administrator Roles and create new users part 2		07:50min
	005. How to define Admin Roles		19:43min

	001. Authentication Profile and Password Profile		09:15min
	002. Sequence Authentication profile		10:06min
	003. User login Authentication via LDAP Server (AD Server)		35:04min
	004. Window user Authenticate via LDAP SERVER		13:45min

	01. Paloalto Interface Deployment modes		29:58min
	02. Interface Deployment in Paloalto FW--TAP Mode		18:56min
	03. TAP-MODE LAB		min
	04. Interface Deployment in Paloalto FW--Layer 2 Mode		35:07min
	05. Configuration Steps--L2 Interface with No VLAN TAG		20:29min
	06. Configuration Steps--Layer 2 Sub-int with VLAN TAG		30:47min
	07. L2 DEPLOYMENT		17:25min
	08. LAYER 2 DEPLOYMENT WITH NO VLAN TAG		26:24min
	09. LAYER 2 SUB-INT WITH VLAN TAG		24:13min
	10. LAYER 2 SUB-INT WITH SVI & INTERVLAN ROUTING		25:19min
	11. Interface Deployment in Paloalto FW--Virtual Wire Mode		33:45min
	12. Configuration Steps --V Wire Deployment--Allow Native & Tag Vlan Traffic		30:09min
	13. Configuration Steps --V Wire Deployment--Separate Customers Traffic--Multiple TAG		33:09min
	14. Virtual-wire		15:52min
	15. VIRTUAL WIRE-NATIVE VLAN-TAG VLAN -GRE		35:51min
	16. Interface Deployment in Paloalto FW--Layer 3 Mode		19:00min
	17. LAB- L3 Deployment		08:26min
	18. Interface Deployment in Paloalto FW--Aggregate Interface Group --HA-- Mode		18:09min

01. Default Security Policy--Intra-Zone and Inter-Zone Traffic Policy	preview	11:58min
02. How to make security policy for Paloalto Inter-Zone		13:43min
03. Paloalto Intra-zone Security Policy		41:33min
04. Paloalto Inter-zone Security Policy		10:31min
005. By Default allow traffic intra zone		11:02min

	001. How to configure Default Route for Paloalto Data Plane		11:48min
	002. Service Route		15:15min
	003. How to connect Paloalto to Internet		29:35min
	004. How to connect paloalot to internet		28:11min
	005.How to allow traffic trust to untrust		32:22min
	006. PALOALTO--SECURITY POLICY-DNS-STATIC & DEFAULT		37:27min

001. Introduction of NAT	preview	27:01min
002. Types of Source NAT		23:57min
003. Types of Destination NAT		07:57min
004. NAT Policy for Dynamic IP & Port(Source NAT)		18:53min
005.Provide Internet Access to LAN----Traffic from TRUST to UNTRUST ZONE part 1 (Source NAT)		30:41min
006.Provide Internet Access to LAN--Traffic from TRUST to UNTRUST ZONE part 2 (Source NAT)		14:22min
007. NAT & Security Policy for STATIC NAT--Allow public access to DMZ server (Source NAT)		30:16min
008.NAT & Security policies for DESITINATION NAT-One to Many-Port Forwarding		53:48min
009.NAT & Security policies for DESITINATION NAT-One to Many-Port Translation		18:47min
010.NAT & Security policies for DNAT-One to Many-Port Translation, Service Group, Address Group		42:30min
011. U -TURN NAT -DUBBLE NAT --SAME ZONE		47:55min
012. U-TURN NAT-DIFFERENT ZONE		16:59min
013.How to Configure SOURCE NAT---Dynamic IP & Port part 1		08:22min
014.How to Configure SOURCE NAT---Dynamic IP & Port part 2		57:19min
015. How to Configure SOURCE NAT---Dynamic IP		09:20min
016. How to Configure SOURCE NAT---Static IP--Bi-directional		10:34min
017.How to Configure DESTINATION NAT--Port Forwarding part 1		14:07min
018.How to Configure DESTINATION NAT--Port Forwarding part 2		22:39min
019.How to Configure DESTINATION NAT--Port Translation		39:47min
020.How to Configure DNAT--Port Translation with Address & Service Group		56:48min
021.How to Configure U-TURN NAT---SAME ZONE-SINGLE NAT		22:14min
022.How to Configure U-TURN NAT---SAME ZONE-DOUBLE NAT		50:00min
023. How to Configure U-TURN NAT---SAME ZONE-DOUBLE NAT-HIDE REAL IP		19:33min
024. How to Configure U-TURN NAT---DIFFERENT ZONE-SINGLE NAT-HIDE REAL IP		13:38min

	001. Dynamic Protocol--BGP & Static Redistribution		40:21min
	002. RIP IMPLEMENTATION		22:00min
	003. How to Configure Rip & Mutual Redistribute with BGP part 1		26:21min
	004. How to Configure Rip & Mutual Redistribute with BGP part 2		37:57min
	005. Dynamic Protocol--BGP & OSPF Redistribution		46:28min
	006. MUTUAL REDISTRIBUTION -RIP & OSPF		19:57min
	007. PROTOCOLS REDISTRIBUTION-STATIC & OSPF		43:07min
	008.MUTUAL REDISTRIBUTION -OSPF & BGP WITH AUTH		80:14min

	001. Overview of Policy Based Forwarding-PBF		19:55min
	002. Configuration Steps--Policy Based Forwarding		46:34min
	003. Lab- Configuration PBF		60:59min

	001. Overview of Inter-Vlan Routing---L3 Sub-interface		15:39min
	002. Configuration Steps--- Inter-Vlan Routing---L3 Sub-interface		23:19min
	003. VRF in Cisco Router Vs VR in Paloalto FW		19:50min
	004. Concept of Sub-interface		23:31min
	005. L3 SUB-INT -VLAN TAGGING -DIFFERENT ZONE-SAME VIRTUAL ROUTER		21:46min
	006. L3 SUBINTERFACE -VLAN TAGGING -DIFFERENT ZONE-DIFFERENT VIRTUAL ROUTER		11:38min

	001.PaloAlto High Availability(HA) & Prerequisite		10:22min
	002. Paloalto HA Links-Control link and Data link		09:00min
	003. Paloalto HA Triggers--Heart Beat--Link Monitoring--Path Monitoring		16:52min
	004. Configuration Steps for HA--Interface Deployment		11:00min
	005. Configuration Steps for HA--Define General Setup-HA mode-Group ID-Peer IP		10:38min
	006. Configuration Steps for HA--Define HA Priority & Preemption		04:56min
	007. Configuration Steps for HA--Define HA 1 & HA 2 Parameter		17:38min
	008.. How to configure Paloalto for HA- Active & Passive Mode Part 1		19:45min
	009. How to configure Paloalto for HA- Active & Passive Mode Part 2		37:02min
	010. PA-Active-Active Introduction part 1		21:38min
	011. PA-Active-Active Introduction part 2		12:57min
	012. PA-Active-Active Introduction part 3		05:04min
	013. PA-Active-Active configuration		21:05min
	014. PA-Active-Active verification		24:53min

	001. IPsec VPN is a combination of multiple protocols		17:52min
	002. Site -To- Site VPN --IPSEC on Cisco Router part 1		50:44min
	003. Site -To- Site VPN --IPSEC on Cisco Router part 2		57:33min
	004. IPSec over GRE part 1		09:59min
	005. IPSec over GRE part 2		08:54min
	006. Site-to-Site VPN Overview---IPSEC --IKE Phase 1--IKE Phase 2		35:48min
	007.Confguration Steps --Site-to-Site VPN on Paloalto --Tunnel Interface		10:58min
	008.Confguration Steps --Site-to-Site VPN on Paloalto--IKE Profile		07:48min
	009.Confguration Steps --Site-to-Site VPN on Paloalto--IPsec Profile		05:53min
	010. Confguration Steps --Site-to-Site VPN on Paloalto--IKE Gateway Profile		13:22min
	011. Confguration Steps --Site-to-Site VPN on Paloalto--IPsec Tunnel		11:06min
	012. Configuration Steps --Site-to-Site VPN on Paloalto--Static Route for PEER LAN		05:09min
	013. Configuration Steps --Site-to-Site VPN on Paloalto--Security Policy for IKE & ESP		06:27min
	014. Configuration Steps --Site-to-Site VPN on Paloalto-Security Policy for VPN Users		06:17min
	015. Configuration Steps --Site-to-Site VPN on Cisco Router--ISAKMP Policy or IKE Profile or Phase 1		07:41min
	016. Configuration Steps --Site-to-Site VPN on Cisco Router--IKE Gateway Profile		03:23min
	017. Configuration Steps --Site-to-Site VPN on Cisco Router--IPSEC Profile or Pahase 2		07:35min
	018 .Configuration Steps --Site-to-Site VPN on Cisco Router--Tunnel Interface & IPSEC Tunnel		06:32min
	019.Confguration Steps --Site-to-Site VPN on Cisco Router--Static Route for PEER LAN		09:42min
	020. How to configure IPSEC tunnel between PALOALTO & CISCO Router part 1		16:33min
	021. How to configure IPSEC tunnel between PALOALTO & CISCO Router part 2		06:01min
	022.How to configure IPSEC tunnel between PALOALTO & CISCO Router part 3		27:34min
	023.How to configure IPSEC tunnel between PALOALTO & CISCO Router part 4		26:18min
	024.How to configure IPSEC tunnel between PALOALTO to PALOALTO		32:36min
	025.PA-IPSEC WITH NAT TRAVERSAL		46:21min

	001. How to configure SSL VPN Part1		16:47min
	002. How to configure SSL VPN Part 2		53:02min
	03. Bonus Video--SSL VPN		71:00min

	001. LDAP Authentication Part 1		39:50min
	002. LDAP Authentication Part 2		37:01min
	03. Bonus Video---LDAP Authentication part 1		21:51min
	04. Bonus Video---LDAP Authentication part 2		31:41min

	001.PANAORAMA part 1		14:18min
	002. PANAORAMA part 2		26:29min

	001. Application Identity-APP-ID		18:11min
	002. How APP-ID works		18:46min
	003. Application Vs Protocol & Port Security Policies part 1		23:56min
	004. Application Vs Protocol & Port Security Policies part 2		20:17min
	005. Application Vs Protocol & Port Security Policies part 3		11:57min
	006. How to Control APP-ID --Block facebook chat & video--youtube base		30:00min
	007. APP-IDS(Application Dependencies)		16:16min

	01. SSL FORWORD PROXY (DECRYPTION POLICY) PART 1		12:06min
	02. SSL FORWORD PROXY (DECRYPTION POLICY) PART 2		11:02min

	01 PACKET_Capture		18:59min

	001. CONTENT ID--URL FILTERING METHOD -1		28:30min
	002. CONTENT ID--URL FILTERING METHOD -2		22:49min
	003. CONTENT ID--URL FILTERING METHOD -3		37:49min

	001..ZONE-PROTECTION		14:26min
	002. DOS -PROTECTION		16:43min

	001. COMMIT LOCK		20:09min
	002. CONFIG AUDIT		07:50min
	003. Object_TAG, Audit_Config, Activity_Report		16:39min

	001.DHCP SERVER & CLIENT		19:04min

	001. SYSLOG SERVER		19:55min

	001 .Dynamic Blocking list		20:23min

	001. Anti-Spyware		06:44min
	002. Anti-Virus_Profile		13:50min
	003. File_Blocking		06:27min
	004. Wild_Fire_Analysis Profile		37:42min
	005. Security_Profile_Groups		15:34min

	001. Capative_Portal Part -1		11:37min
	002. Captive_Portal-Part-2		18:50min

	1. Revert config		35:60min
	2. Save config and load config		15:27min
	3. Export and Import		16:32min
	04. Bonus Videos EXPORT-IMPORT CONFIG		32:41min

Requirements

> Students needs to be familiar with firewall concepts > Students needs to understand Networking Fundamentals > Students need to understand basic networking

Description

Palo Alto Networks® next-generation firewalls inspect all traffic (including applications, threats, and content), and tie that traffic to the user, regardless of location or device type. The user, application, and content—the elements that run your business—become integral components of your enterprise security policy.

Recent Courses

Before ccnp

November, 27th 2025
2

Cisco Certified Network Associate Routing & Switching (CCNA)

6000.00₹
~~10000.00₹~~

paloalto 9am to 11am 30April25 Regu...

April, 30th 2025
1

paloalto 9am to 11am 30April25 Regular

15000.00₹

CCNA 6-8 Regular April 25

April, 26th 2025
2

CCNA 6-8 Regular April 25

12000.00₹

Online Lab Rental Services || IT La...

April, 15th 2025
5

Our Online IT Lab Rental Services are designed not just for access, but for real learning and mastery. Whether you're prepari..

Free

CCNA R&S 11-1 Regular (17th March 2...

March, 24th 2025
5

CCNA R&S Regular (17th March 25)

12000.00₹

About Instructor

Anwar Alam Sir

About Instructor

Anwar did his B.E. in Electronics & communication from Jamia Millia Islamia (a Central University), New Delhi, India. He has more than 27 years of industry experience in india & abroad. He started his career in CISCO domain in mid 2004 when he was in Kuwait Army, State of Kuwait. Since then he has been enlightening minds in the networking field and provides guidance and training to both highly skilled professional as well as freshers.

He has ultimate knowledge in multiple domain like CCIE(R&S), CCNP(R&S), BGP, MPLS, CCNA(R&S), CCNA(SEC), PALOALTO, LTM, GTM, SDWAN, MCP, MCSA,ASA, DMVPN, IPV6, QOS etc...

Currently he is the Director of NETWORKING CORE PROGRAM.He has worked with CISCO Network Academy(Jamia Hamdard), Minstry of Defense - Kuwait Army, CMC, L&T, Vision Communication, VTPL etc.

Student Feedback

Course Rating

100%

16-12-2021

shafique ahmad

I looked everywhere, nothing is better than this, the knowledge and explanation of every single topic is in detail, which is amazing very helpful and informative.