Palo Alto Networks training · Legacy course

Dedicated classes only

Firewall Security Best Practices and Threat Prevention(EDU-214)

EDU-214 is no longer offered on our public training schedule. If you are interested in this course, we can still offer it as a dedicated class. Contact our training team to discuss your requirements.

Contact Training Team

EDU-214 course overview

What you’ll learn

Strengthen an existing Palo Alto Networks Next-Generation Firewall deployment by assessing its security policies, applying threat prevention best practices and improving day-to-day security operations.

  • Assess the effectiveness of your current security policies.
  • Develop workflows for managing your security posture.
  • Update an existing policy set to implement security best practices.
  • Monitor network traffic using the web interface and firewall reports.
  • Use tools such as the Best Practice Assessment (BPA) tool to understand your environment.

Make the most of your firewall’s prevention capabilities

A like-for-like migration from a legacy firewall can leave important Next-Generation Firewall threat prevention capabilities unused. This course explains how to make fuller use of those capabilities in an existing environment.

Choosing where to start and which best practices suit your environment can be challenging. The course covers both the security controls and a practical method for introducing them with minimal disruption.

Watch a sample firewall hardening lesson
Level
Intermediate
Duration
3 days
Delivery
Live instructor-led training with hands-on labs; dedicated online or on-site delivery.
Platform
Palo Alto Networks Next-Generation Firewalls running PAN-OS.
Session pattern
The original outline offered three full-day or five half-day sessions. Agree the timing for your dedicated class with our training team.
Certification
This course is not linked to a Palo Alto Networks certification.

Who it’s for

Is EDU-214 right for your team?

  • Security Engineers
  • Security Administrators
  • Security Operations Specialists
  • Security Analysts
  • Support Staff

Prerequisites

Firewall: Configuration and Management (EDU-210), or equivalent practical experience with Palo Alto Networks Next-Generation Firewalls, is recommended. You should also understand basic security concepts. Experience with IPS, proxy and content filtering technologies is an advantage.

Certification: This course is not linked to a Palo Alto Networks certification.

Discuss your team’s requirements

Learning experience

What’s included in the course

Best Practices & Real Life Experience

Consigas instructors are security consultants with experience designing, implementing, migrating, managing and supporting Palo Alto Networks solutions. They bring practical examples into the classroom. Consigas received Palo Alto Networks Excellence in Training awards in 2016, 2019 and 2022.

Video Recordings

Recorded sessions let you revisit demonstrations and complex topics after the class. Instructor whiteboard drawings are shared alongside the recordings.

Lab Access for 3 Months

The original course includes a dedicated virtual lab during training and for three months afterwards, without a time or usage limit. Its lab environment comprises a client workstation, a firewall, an extranet server and the Expedition migration tool, with MineMeld as an add-on. Discuss the appropriate lab setup for your dedicated class with our training team.

Coursebook and Learning Materials

The original course materials include the official Palo Alto Networks coursebook with slides and detailed topic explanations, supplied as an OnSecure Secure eBook. The eBook reader supports printing. Confirm the materials for your dedicated class with our training team.

Course agenda

Explore the complete EDU-214 agenda.

The “Firewall Security Best Practices and Threat Prevention” course covers the following content.

Select a module to see its topics and lab activities.

Introduction
  • Course overview
  • Course scenario description
  • BPA tool, ACC, logging, and reporting
  • Lab architecture
Security Profiles
  • Review of Content-ID
  • Defining context for Security Profiles
  • Creation of profile groups
Daily Operations and Maintenance
  • Software release cycle
  • App-ID and threat update best practices and process
  • Policy description and audit best practices
Establish Initial Baseline Visibility
  • Log Forwarding Profiles
  • Syslog, email, SNMP traps, and formatting
  • Custom and pre-made reporting
  • Dynamic user and address groups
Analyze and Update Security Rules Passing Traffic
  • Expedition for BPA
  • Policy Optimizer
  • Application-centric rules
  • Categorizing traffic into Inbound, Outbound, and Internal flows
Inbound Security Rules Best Practices and Analysis
  • Inbound threat protection
  • Workflow for false positives
  • Inbound SSL Decryption best practices
Outbound Security Rules Best Practices and Analysis
  • User-ID
  • URL Filtering Profiles
  • Credential theft
  • Custom URL categories
  • Outbound SSL decryption best practices
Internal Security Rules Best Practices and Analysis
  • Internal traffic security best practices
  • Internal traffic requirement workflows
  • Application Override policies
  • Intrazone traffic best practices
Administratively Hardening PAN-OS
  • Role-based access control
  • Multi-factor authentication
  • Administrative best practice principles
  • Hardening administrative interfaces
Reducing Policy set and Simplification
  • Tag unused rules using Policy Optimizer
  • Implement policy hygiene
  • Describe how to use Address Groups and regions to reduce the policy set
  • Describe Zero Trust architecture

Genuine learner feedback

Students Love Our Instructors

4.77 out of 5 Based on 151 course reviews Featured learner reviews Reviews collected via Reviews.io ↗ View the complete Consigas profile on Reviews.io (opens in a new tab).

Angie Mann at Bank of Stockton

Stockton, United States · September 2021

Verified via Reviews.io

We just switches over to Palo Alto firewalls from Cisco ASAs and this class was very helpful in tightening down our security policies. Especially the ssl decryption module. I am in the process of slowly enabling encryption on IT staff and Operations support team as the test group.

Sander Valldal at Kongsberg

August 2024

Verified via Reviews.io

good course that takes you through the journey from A-Z on how to secure and lock down your firewall and policies following the best practices. Domagoj is also a fantastic instructor and knows his stuff really well, and absolutely great at explaining things during the course, also refers to real-world scenarios and experiences which is cool.

Alvin Serna at Peoples Group

United States · April 2024

Verified via Reviews.io

This Threat prevention training gives me more confidence in dealing with palo alto firewalls and the training itself will help make our data center more secure once we implement additional measures based from this training.

Andreas Meyer at TFA Berlin

Berlin, Germany · November 2024

Verified via Reviews.io

Der Kurs gibt viele Einblicke in Best Practices und zeigt Funktionen, wie wir sie in der Anwendung so bisher noch nicht gekannt oder genutzt haben. Es empfiehlt sich, aus meiner Sicht, schon Erfahrungen mit der Firewall im Einsatz zu haben um das vorhandene Regelwerk zu schärfen und zu optimieren.

Austin Marr at Edmonds School District

October 2023

Verified via Reviews.io

Optimizing Firewall Threat Prevention takes a deep dive into inbound and outbound security policy and rule best practices, applications filtering and how to administratively harden your firewall.

Remko de Koning at Indorama

Spijkenisse, Netherlands · November 2021

Verified via Reviews.io

When it comes to training, in general, a lot of information in a too short amount of time. Labs are very nice build could perhaps use more real-life scenarios. Nevertheless, cleverly build and it is a very welcome add-on to the training.

Page 1 of 2

Before you enquire

Frequently asked questions

Can we take this course online?

Yes. A dedicated live online class combines instructor explanations, Palo Alto Networks training slides, whiteboarding and demonstrations with hands-on work in your own lab. The original course uses Zoom for the live classroom.

Can you deliver this course at our premises?

Contact our training team to discuss dedicated on-site classroom delivery, your location, group size and requirements. EDU-214 is no longer offered on our public schedule.

Will we receive a coursebook and recordings?

The original course includes the official Palo Alto Networks electronic coursebook, session recordings and instructor whiteboard drawings. Discuss the course materials and delivery arrangements when planning your dedicated class.

Can the electronic coursebook be printed?

The original coursebook can be printed through its eBook reader. Our training team can confirm the materials supplied for your dedicated class.

Dedicated classes only

Plan EDU-214 training for your team

Tell our training team about your environment, group size and preferred timing so we can discuss a dedicated class that meets your requirements.