This module teaches you how to manage and configure Palo Alto firewalls in real-world environments. You’ll learn how to use management interfaces, set up secure access methods, and enforce restrictions. Identity management, authentication profiles, and role-based access ensure only the right people manage devices. You’ll practice working with firewall configurations: understanding running vs. candidate configs, saving, exporting, and backing up settings. Panorama management is introduced, showing how to push policies and updates across multiple firewalls in a hierarchy. You’ll also schedule dynamic updates, configure security zones, and set up firewall interfaces to ensure secure and efficient traffic flow.

In this module, you’ll learn how to create and organize reusable objects that simplify firewall policy management. You’ll set up address objects and groups, both static and dynamic, and learn how to tag and categorize them. Services and service groups are covered to make firewall rules more precise and easier to maintain. You’ll also work with external dynamic lists (EDLs) to block or allow traffic based on feeds like malicious IPs or domains. Application filters and groups help you categorize apps based on characteristics in Palo Alto’s App-ID database. By the end, you’ll be able to build flexible, scalable, and cleaner firewall configurations.

This module dives into how Palo Alto firewalls evaluate and enforce security policies. You’ll learn to build App-ID–based rules that identify traffic by application, not just port or protocol. You’ll also understand rule types (interzone, intrazone, universal) and how to apply logging, user/device identity, and external dynamic lists in policies. Tools like Policy Test Match and Policy Optimizer help refine policies, reduce redundancies, and improve performance. You’ll also configure NAT (source and destination) for translating IP addresses and managing connectivity. By the end, you’ll know how to design clear, effective policies that balance security with business needs.

This module focuses on protecting your network traffic using Palo Alto’s security profiles. You’ll configure antivirus, anti-spyware, vulnerability protection, URL filtering, and WildFire (malware analysis) to block threats in real time. You’ll also learn how to group and apply these profiles to firewall policies for layered defense. Logs (traffic, threat, data, system) are introduced as powerful tools to analyze what’s happening on your network. You’ll explore DNS Security to stop domain-based attacks and apply URL filtering to control browsing based on categories or custom lists. Finally, you’ll practice user- and group-based access mapping to ensure the right people have the right access.

Configures and manages enterprise-grade firewalls.

Monitors and responds to firewall alerts in SOC environments.

Designs and enforces security policies across network infrastructures.

Implements threat prevention and content security solutions in organizations.

This is the immediate certification you receive upon passing the PCNSA exam.