This course prepares participants to centrally manage Palo Alto Networks next-generation firewalls using Panorama. It covers initial configuration, firewall onboarding, templates, device groups, centralized logging, administrative access, reporting, and troubleshooting. Participants learn to maintain consistent configurations and security policies across multiple firewalls while improving visibility into network activity.

 

Duration 2 Days – 14 hrs.

 

Objectives

• Explain Panorama’s role in centralized firewall management.
• Configure Panorama and onboard managed firewalls.
• Use templates, template stacks, and variables to standardize configurations.
• Organize device groups and manage shared policies and objects.
• Configure log collection and forwarding.
• Use centralized logs and reports to investigate network activity.
• Manage administrative accounts and access permissions.
• Troubleshoot common connectivity and configuration deployment issues.

 

Target Audience 

• Security administrators.
• Security engineers and architects.
• Security operations specialists.
• Security analysts.
• Network administrators responsible for Palo Alto Networks firewalls.

 

Prerequisites 

• Completion of Firewall Essentials: Configuration and Management (EDU-210), or equivalent practical experience.
• Familiarity with Palo Alto Networks next-generation firewall administration.
• Understanding of routing, IP addressing, and basic network security concepts.

 

 

Course Outline 

Day 1: Centralized Configuration and Policy Management

Module 1: Initial Configuration

• Panorama architecture and deployment considerations.
• Management interface and initial setup.
• Licensing, connectivity, and essential services.

 Module 2: Adding Firewalls

• Preparing firewalls for centralized management.
• Registering devices and verifying connectivity.
• Understanding configuration synchronization.

 Module 3: Templates

• Templates, template stacks, and variables.
• Shared network and device settings.
• Configuration inheritance and overrides.

 Module 4: Device Groups

• Device group hierarchy and shared objects.
• Centralized security policy management.
• Commit and configuration push workflows.

 

 

Day 2: Visibility, Administration, and Troubleshooting

Module 5: Log Collection and Forwarding

• Log Collectors and collector groups.
• Firewall log forwarding.
• Log storage and retention considerations.

Module 6: Using Panorama Logs

• Centralized log navigation and filtering.
• Investigating traffic and threat events.
• Correlating activity across managed firewalls.

 Module 7: Panorama Administrative Accounts

• Administrator accounts and authentication.
• Role-based permissions and access domains.
• Administrative accountability.

 Module 8: Reporting

• Aggregated network visibility.
• Custom reports and scheduling.
• Interpreting security and traffic trends.

 Module 9: Troubleshooting

• Firewall connection and synchronization problems.
• Commit failures and configuration conflicts.
• Missing logs and diagnostic tools.