Palo Alto Networks Certified Network Security Administrator (PCNSA)

Module 1:

Platforms and Architecture

• Security platform overview
• Next-generation firewall architecture
• Zero Trust security model
• Firewall offerings

Module 2: 

Initial Configuration

• Administrative controls
• Initial access to the system
• Configuration management
• Licensing and software updates
• Account administration
• Viewing and filtering logs

Module 3: Interface Configuration

• Security zones and interfaces
• Tap interfaces
• Virtual Wire interfaces
• Layer 2 interfaces
• Layer 3 interfaces
• Virtual routers
• VLAN interfaces
• Loopback interfaces
• Policy-based forwarding

Module 4:

Security and NAT Policies

• Security policy fundamental concepts
• Security policy administration
• Network Address Translation
• Source NAT configuration
• Destination NAT configuration

Module 5: 

App-ID™

• Application identification (App-ID) overview
• Using App-ID in a Security policy
• Identifying unknown application traffic
• Migrating to an App-ID-based Security policy
• Updating App-ID

Module 6: 

Basic Content-ID™

• Content-ID overview
• Vulnerability Protection Security Profiles
• Antivirus Security Profiles
• Anti-Spyware Security Profiles
• File Blocking Profiles
• Attaching Security Profiles to Security policy rules

Module 7: 

URL Filtering 

• URL Filtering Security Profiles
• Attaching URL Filtering Profiles

Module 8:

Decryption

• Decryption concepts
• Certificate management
• SSL Forward Proxy decryption

Module 9:

WildFire™

• WildFire concepts
• Configuring and managing WildFire
• WildFire reporting

Module 10: 

User-ID™

• User-ID overview
• User mapping methods overview
• Configuring User-ID
• PAN-OS® Integrated agent configuration
• Configuring group mapping
• User-ID and Security policy

Module 11: 

VPN Overview

• Site to site VPN
• Large Scale VPN
• Remote Acces VPN

Module 12: Monitoring and
Reporting

• Dashboard, ACC, and Monitor
• Log forwarding
• Syslog
• Configuring SNMP