Deploy and Configure Core Components 20%

2.1 Configure management profiles

• 2.1.1 Interface management profile
• 2.1.2 SSL/TLS service profile

2.2 Deploy and configure Security profiles

• 2.2.1 Custom configuration of different Security profiles and Security profile groups
• 2.2.2 Relationship between URL filtering and credential theft prevention
• 2.2.3 Use of username and domain name in HTTP header insertion
• Header insertion for SAAS enforcement
• 2.2.4 DNS Security
• DNS Sinkhole
• Debug DNS Security
• 2.2.5 How to tune or add exceptions to a Security profile
• 2.2.6 Compare and contrast threat prevention and advanced threat prevention
• 2.2.7 Compare and contrast URL Filtering and Advanced URL Filtering

2.3 Configure zone protection, packet buffer protection, and DoS protection

• Zone Protection
• 2.3.1 Customized values versus default settings
• Dos Protection
• 2.3.2 Classified versus aggregate profile types
• 2.3.3 Layer 3 and Layer 4 header inspection
• Packet Buffer Protection

2.4 Design the deployment configuration of a Palo Alto Networks firewall

• 2.4.1 Active / Passive Active / Active
• 2.4.2 HA pair
• HA clustering
• 2.4.3 Zero Touch Provisioning (ZTP)
• 2.4.4 Bootstrapping

2.5 Configure authorization, authentication, and device access

• 2.5.1 Role-based access control for authorization
• 2.5.2 Different methods used to authenticate

resources

• Admin Roles
• Certificate authentication
• Kerberos
• SAML

2.6 Configure and manage certificates

• 2.6.1 Usage
• 2.6.2 Profiles
• 2.6.3 Chains
• IPSec cert auth video

2.7 Configure routing

• Advanced routing
• 2.7.1 Dynamic routing
• Route Redistribution

BGP Resources

• BGP route redistribution
• BGP advanced topics
• BGP Quiz 2
• Scenario Based Quiz
• BGP articles

OSPF Resources

• OSPF overview
• OSPF misc topics
• OSPF Quiz
• OSPF scenarios quiz

Other Resources

• 2.7.3 Static routes
• 2.7.4 Path monitoring
• 2.7.5 Policy-based forwarding
• 2.7.6 Virtual router versus logical router

2.8 Configure NAT

2.8.1 Nat resources
• NAT policy rules
• Nat policy examples
• Nat64
• Npt6
• NAT and DNS
• 2.8.2 Security rules
• 2.8.3 Source NAT
• Destination NAT
• 2.8.4 No NAT
• 2.8.5 Use session browser to find NAT rule name
• 2.8.6 U-TURN NAT
• 2.8.7 Check HIT counts

2.9 Configure site-to-site tunnels

• IPSec overview
• 2.9.1 IPSec components
• 2.9.2 Static peers and dynamic peers for IPSec
• 2.9.3 IPSec tunnel monitor profiles
• 2.9.4 IPSec tunnel testing
• 2.9.5 Generic Routing Encapsulation (GRE)
• 2.9.6 One-to-one and one-to-many tunnels
• LSVPN
• LSVPN setup video
• 2.9.7 Determine when to use proxy IDs

2.10 Configure service routes

• Service Route Overview
• 2.10.1 Default
• 2.10.2 Custom
• 2.10.3 Destination
• 2.10.4 Custom routes for different vsys versus destination routes
• 2.10.5 How to verify service routes
• Service Route Quiz

2.11 Configure application-based QoS

• QoS Overview
• QoS and security policy
• 2.11.1 Enablement requirements
• Configuration QoS
• 2.11.2 QoS policy rule
• 2.11.3 Add DSCP/TOS component
• 2.11.4 QoS profile
• 2.11.5 Determine how to control bandwidth use on a per-application basis
• 2.11.6 Use QoS to monitor bandwidth utilization

Not listed

• Policy Based Forwarding
• Credential Phishing Prevention