Included
Video Recordings
Video recordings are included as a standard student benefit, so you can revisit demos and complex topics after the class.
Palo Alto NetworksStrata FirewallEDU-214
Firewall Security Best Practices and Threat Prevention
Harden Palo Alto Networks FireWall deployments using security best practices: Threat Prevention, WildFire, URL Filtering, DNS Security, decryption policy, and configuration checks aligned with Palo Alto Networks best-practice assessments.
- Duration
- 3 Days
- Delivery
- Live instructor-led
- Format
- Online or classroom
- Learner rating
- 4.77/5151 Course reviews
What you will be ready to do
Get hands-on with the official Palo Alto Networks curriculum.
- Work through guided, hands-on labs on your own dedicated instance.
- Apply configuration best practices from real projects.
- Understand how the platform components work together.
- Troubleshoot common issues with a structured approach.
Who it’s for
Is EDU-214 the right course?
Designed for
Security engineers responsible for maximising the prevention capabilities of an existing Palo Alto Networks FireWall estate.
Prerequisites
Ask for course advice Basic networking knowledge is recommended. No prior Palo Alto Networks experience is required unless stated for advanced courses.
Included
Lab Access for 3 month
You work in your own dedicated lab during the training week. FireWall courses include 3-month extended lab access after the class.
Course authority
Official curriculum
Official Palo Alto Networks curriculum
Course content
Verify the curriculum before you choose a class.
Learn by doing in a dedicated lab. Every module pairs theory with lab time, so you practise each step the way you would on the job. The pace suits engineers who are new to the platform as well as administrators who want to close gaps and adopt best practices across their deployment.
Best Practices & real Life Experience
Your instructor brings years of real-world Palo Alto Networks project experience into the classroom and shares field-proven best practices throughout the course.
Certification
This course supports the matching Palo Alto Networks certification path. Ask our training team which exam and preparation route fits your goals.
Scope
The course follows the official Palo Alto Networks curriculum for the version listed in the schedule.
FAQ
Questions about formats, time zones, payment options, or team training? Contact the training team at training@consigas.com.
Genuine learner feedback
Students Love Our Instructors
Based on 151 course reviews
Featured learner reviews Reviews collected via Reviews.io ↗
View the complete Consigas profile on Reviews.io (opens in a new tab).
Angie Mann at Bank of Stockton
Verified via Reviews.io
We just switches over to Palo Alto firewalls from Cisco ASAs and this class was very helpful in tightening down our security policies. Especially the ssl decryption module. I am in the process of slowly enabling encryption on IT staff and Operations support team as the test group.
Michael Mahaffey at Tulsa
Verified via Reviews.io
Outstanding course concerning security posture enhancement using various features of PAN-OS. Instructors are very knowledgeable and provide real-world scenarios that can/will be encountered in the security realm.
Alvin Serna at Peoples Group
Verified via Reviews.io
This Threat prevention training gives me more confidence in dealing with palo alto firewalls and the training itself will help make our data center more secure once we implement additional measures based from this training.
Steen Nielsen at Homestreet
Verified via Reviews.io
This is one of the best PA trainings I have done, gave me a good view of how we need to move forward and optimize our Fw's
The 4 hours sessions is just perfect, I highly suggest doing mor eof those
Sean Lewis at Plains All American Pipeline
Verified via Reviews.io
The topics covered in this course will be very helpful to anyone who is deploying Palo Alto Firewalls in thier network. In addition to the material covered in the curriculum, the bonus material from Consigas are great tools that I know will be useful and assist me in the near future as I deploy Palo Alto firewalls in my network.
David Vang at Twin Rivers Unified School District
Verified via Reviews.io
Materials good. I like the labs.
Page 1 of 2
Course agenda
Explore the complete EDU-214 agenda.
The “Firewall Security Best Practices and Threat Prevention” course covers the following content.
Select a module to see its topics and lab activities.
Introduction
- Course overview
- Course scenario description
- BPA tool, ACC, logging, and reporting
- Lab architecture
Security Profiles
- Review of Content-ID
- Defining context for Security Profiles
- Creation of profile groups
Daily Operations and Maintenance
- Software release cycle
- App-ID and threat update best practices and process
- Policy description and audit best practices
Establish Initial Baseline Visibility
- Log Forwarding Profiles
- Syslog, email, SNMP traps, and formatting
- Custom and pre-made reporting
- Dynamic user and address groups
Analyze and Update Security Rules Passing Traffic
- Expedition for BPA
- Policy Optimizer
- Application-centric rules
- Categorizing traffic into Inbound, Outbound, and Internal flows
Inbound Security Rules Best Practices and Analysis
- Inbound threat protection
- Workflow for false positives
- Inbound SSL Decryption best practices
Outbound Security Rules Best Practices and Analysis
- User-ID
- URL Filtering Profiles
- Credential theft
- Custom URL categories
- Outbound SSL decryption best practices
Internal Security Rules Best Practices and Analysis
- Internal traffic security best practices
- Internal traffic requirement workflows
- Application Override policies
- Intrazone traffic best practices
Administratively Hardening PAN-OS
- Role-based access control
- Multi-factor authentication
- Administrative best practice principles
- Hardening administrative interfaces
Reducing Policy set and Simplification
- Tag unused rules using Policy Optimizer
- Implement policy hygiene
- Describe how to use Address Groups and regions to reduce the policy set
- Describe Zero Trust architecture
Your next step
Choose the EDU-214 class that fits your schedule.
Compare dates and prices first. If you are still confirming timing, you can reserve this course for free or ask the training team for advice.