Catalog > All Topics

Panorama: NGFW Management (PNGFWM)

Palo Alto
2 Days
Download Course Outline
$1,595.00
Request a Quote
Credit not applicable
Share
Schedule
Export to CSV
    • T87903
    • 2 days
    • 12/15/2025 - 12/16/2025*
    • 9:00 AM
    • (GMT -06:00) Central Standard Time
    • Presented via WebEx
      • VC
        Virtual Classroom
        Attend any of our instructor-led classes virtually regardless of your physical location.
    Enroll Now
      • PC
        Private Class
        Privately train a group of your employees at your facility, virtually, or any of our locations.
    Request
  • LCLive Classroom
    Live Classroom
    Learn and interact with your instructor and peers in-person in our classrooms.
  • VCVirtual Classroom
    Virtual Classroom
    Attend any of our instructor-led classes virtually regardless of your physical location.
  • PCPrivate Class
    Private Class
    Privately train a group of your employees at your facility, virtually, or any of our locations.
  • GTRGuaranteed to Run
    Guaranteed to Run
    GTR classes are guaranteed to run as promised and delivered.

*event may not be applicable to special offers or promotions.

Course Summary
Show All

Description

The Palo Alto Networks Panorama: NGFW Management (replaces EDU-220) course is an instructor-led training that will help you to:

  • Learn how to design, configure and manage the Panorama FireWall management server
  • Gain experience in how to centrally manage policies using device groups
  • Learn how to rollout network and device configuration to many FireWalls using templates and template variables
  • Gain experience with administration, log collection, as well as logging and reporting
  • Become familiar with planning and design considerations for Panorama deployment

This training is a specialised course for the Panorama management solution to centrally manage FireWalls at scale. It not only teaches the features and functionalities of Panorama but also provides guidance on how to design a distributed firewall network that is managed from a central location.

Prerequisites

The “Firewall Configuration and Management” (EDU-210) course or equivalent practical experience working with the Palo Alto Networks Next-Generation FireWall is a recommended ​prerequisite to taking this Palo Alto panorama training. Students also should be familiar with basic security concepts. Familiarity with networking concepts, including routing, switching, and IP addressing, is recommended.

Who Should Attend

Security Architects

Security Administrators

Security Operations Specialists

Security Analysts

Security Engineers

Outline

Adding New Firewalls to Panorama

  • Add a FireWall
  • Automated Commit recovery
  • Automatically Add multiple FireWalls via CSV import
  • Tagging
  • Organizing Summary Information
  • Secure Communication Settings
  • Manage device licenses
  • Master key

Upgrade firewalls from Panorama

Deploy Content ID Updates to firewalls from Panorama

Panorama solution overview

Deployment options

Panorama platforms

Register and License Panorama

GUI overview

Panorama License and Software update

Plugin Architecture

Services and Interface Configuration

Panorama Commits

Configuration Management

  • Config Operations
  • Manage Backup incl. export device state from FireWall
  • Config export

Templates overview

Configuring templates

  • Device configuration via template
  • Local overwrite

Template Variables

  • Overview
  • Configuration

Real-life use cases and best practices

Device groups overview

Configuring Device Groups

  • Setup Device-group hierarchy
  • Group and push to HA Peers

Objects

  • Create an object – shared/disable override
  • Override
  • Move
  • Device Group and template mapping

Policies

  • Rules Hierarchy
  • Rulebase structuring
  • Configure rules
  • Move Rules
  • Rulebase preview
  • Unused Rules
  • Policy rule targets

Rule changes archive

  • Audit Comments
  • Tag-Based Rule Groups

Real-life use cases and best practices

Design Considerations for Deployment

Log storage and retention

  • Determine the Log Rate
  • Storage calculation
  • Log retention

Planning Considerations

Panorama log event forwarding

Customizing Log Tables

Using Filters in Log Tables

Exporting Filtered Data

Authenticating Panorama administrators

Panorama authentication methods

Admin Role

Creating Administrative Accounts

  • Custom Panorama Admin incl. Admin Role
  • Device Group and Template Admin incl. Access Domain and Admin Role
  • Password Profile and Password Complexity

External Authentication

  • Authentication Profile
  • LDAP Server Profile

Concurrent Administration

  • Config Lock

Data Sources Used by Panorama

Operational Information Available in Panorama

Reporting Capabilities in Panorama

Health and Summary Information of Managed Firewalls

Troubleshooting Communication Issues with Panorama

Troubleshooting Commit Errors

Test policy functionality

Transition a Forewall to Panorama Management

This is an additional module which is not part of the official course. The instructor will demo the import of an existing FireWall’s local configuration into Panorama and explain various caveats.

Overview of Use Cases

  • Import existing FireWall if Panorama wasn’t used so far
  • Import local config after FireWall migration
  • Import FireWall config that has been partially managed by Panorama

Config import incl. caveats

  • Dependency on Device config
  • Caveats on fine-tuning the config
  • Disable config sync in a HA cluster