Panorama : NGFW Management

Training Content

DAY 1
9.00am – 10.30am
1. Initial Configuration

• Panorama overview
• Connecting to Panorama
• Understanding Services and Interface configuration
• Understanding Panorama licenses
• How to perform Software upgrades and dynamic updates
• Understanding the Commit process and configuration management
• Lab Activities:
  • Logging in to Panorama and both firewalls
  • Document configuration and license information
  • Configure Panorama Management Interface
  • Verify DNS, NTP and update servers
  • Configure Panorama General Settings
  • Schedule automatic config exports
  • Schedule Content Updates for Panorama
  • Save and export Panorama configuration

10.30am – 10.45am – Short Break

10.45am – 12.30pm
2. Adding Firewalls

• register firewalls to Panorama for centralized management and monitoring
• how to upgrade managed firewalls from Panorama,
• distributing Content-ID (Antivirus signatures, and Application and Threat signatures from Panorama to the firewalls.
• Lab Activities:
  • Copying serial numbers from firewalls to Panorama
  • Setting firewall locations
  • Configure firewalls to communicate with Panorama
  • Add firewalls to Panorama
  • Modify Summary Window columns
  • Verify firewalls are connected to Panorama
  • Verify firewall licenses
  • Schedule dynamic updates for firewalls

12.30pm – 1.30pm – Lunch

1.30pm – 3.00pm
3. Templates

• Templates Overview
• Configuring Templates and Template Stacks
• Using Template variables
• Lab Activities:
  • Creating Templates
  • Create Device and Network elements in Templates
  • Create Template Stacks
  • Create Template variables
  • Import CSV file to populate Template variables
  • Push the Template Stack to managed devices
  • Verify Template settings on Head-Office and Branch firewalls

3.00pm – 3.15pm – Short Break

3.15pm – 5.00pm
4. Device Groups

• creating Device Groups
• understanding Device Group hierarchy and inheritance,
• understanding Pre-Rules and Port-Rules
• Lab Activities:
  • Create Device Groups
  • Create Security profiles
  • Create a Security profile group
  • Configure Security policy Pre Rules and Post Rules
  • Modify Default Security policy rules
  • Create NAT Post Rules for Users_Net traffic
  • Preview rules in Panorama
  • Test internet access
  • Confirm configurations on each firewall

DAY 2
9.00am – 10.30am
5. Log Collection and Forwarding

• Log Forwarding Profile configuration
• Understand Log Collectors and Collector Group
• Lab Activities:
  • Create default Log Forwarding profile
  • Modify security rules to use default Log Forwarding profile
  • Create new Security Policy Rule to see effect of default Log Forwarding profile
  • Create Panorama Server profiles
  • Forward Panorama System and Config Log events
  • Generate traffic and verify log forwarding

6. Using Panorama Logs

• work with Panorama Log tables, using log filters, and exporting data
• Lab Activities:
  • Generate traffic from Chicago and Berlin clients
  • Use information from traffic files to block certain applications
  • Use information in URL log to modify the URL Filtering Profile (Corp) to block certain sites
  • Use information in Threat log
  • Use filters to locate specific hosts generating threat traffic
  • Export filter results to spreadsheet and open in LibreCalc

10.30am – 10.45am – Short Break

10.45am – 12.30pm
7. Panorama Administrative Accounts

• External Authentication methods for Panorama Administrators
• understanding Admin roles
• how to create an administrator account, considerations for concurrent administration
• Lab Activities:
  • Configuring RADIUS Server profile and Authentication profile
  • Test RADIUS Authentication profile from Panorama CLI
  • Configure an Admin Role profile
  • Create an administrator account and assign the Admin Role profile to it
  • Configure and validate Administrator Accounts
  • Using Commit Lock

12.30pm – 1.30pm – Lunch

1.30pm – 3.00pm
8. Reporting

• Learn about Panorama Monitoring and Reporting tools, and the data sources they can use.
• learn how to enable and use Panorama pre-defined reports, and configuring custom reports.
• Lab Activities:
  • Generate traffic through both firewalls
  • Create a Custom Report for threats within last 24 hours
  • Create a Custom Report for Applications used within last 7 days
  • Create a Custom Report for URL Categories blocked within last 7 days
  • Create a Weekly Report Group
  • Create an email schedule to send out weekly reports

3.00pm – 3.15pm – Short Break

3.15pm – 5.00pm
9. Troubleshooting

• Troubleshooting Communication Issues with Panorama
• Troubleshooting Commit Errors, using the Test Policy functionality
• Monitoring the health of Panorama.
• Lab Activities:
  • Examining commit failure messages
  • Verify that firewalls are connected to Panorama
  • Troubleshoot firewall commit failure
  • Remove unused files from Panorama
  • Configure and test SNMP on Panorama
  • Examine SNMP Data Available from Panorama