Included
Video Recordings
Video recordings are included as a standard student benefit, so you can revisit demos and complex topics after the class.
Palo Alto NetworksStrata FirewallPRA-FW
Panorama: NGFW Management
Manage fleets of Palo Alto Networks Next-Generation FireWalls at scale with Panorama: templates, template stacks, device groups, shared policy, log collection, and centralised operations.
- Duration
- 2 Days
- Delivery
- Live instructor-led
- Format
- Online or classroom
- Learner rating
- 4.68/51,076 Course reviews
What you will be ready to do
Get hands-on with the official Palo Alto Networks curriculum.
- Work through guided, hands-on labs on your own dedicated instance.
- Apply configuration best practices from real projects.
- Understand how the platform components work together.
- Troubleshoot common issues with a structured approach.
Who it’s for
Is PRA-FW the right course?
Designed for
Engineers and administrators who manage multiple Palo Alto Networks FireWalls and want centralised configuration, policy, and visibility with Panorama.
Prerequisites
Ask for course advice Basic networking knowledge is recommended. No prior Palo Alto Networks experience is required unless stated for advanced courses.
Included
Lab Access for 3 month
You work in your own dedicated lab during the training week. FireWall courses include 3-month extended lab access after the class.
Course authority
Official curriculum
Official Palo Alto Networks curriculum
Course content
Verify the curriculum before you choose a class.
Learn by doing in a dedicated lab. Every module pairs theory with lab time, so you practise each step the way you would on the job. The pace suits engineers who are new to the platform as well as administrators who want to close gaps and adopt best practices across their deployment.
Best Practices & real Life Experience
Your instructor brings years of real-world Palo Alto Networks project experience into the classroom and shares field-proven best practices throughout the course.
Certification
This course supports the matching Palo Alto Networks certification path. Ask our training team which exam and preparation route fits your goals.
Scope
The course follows the official Palo Alto Networks curriculum for the version listed in the schedule.
FAQ
Questions about formats, time zones, payment options, or team training? Contact the training team at training@consigas.com.
Genuine learner feedback
Students Love Our Instructors
Based on 1,076 course reviews
Featured learner reviews Reviews collected via Reviews.io ↗
View the complete Consigas profile on Reviews.io (opens in a new tab).
Jeffrey Milheim at Church & Dwight Co., Inc.
Verified via Reviews.io
Gave me a much firmer understanding of Panorama. I had previous experience, but not in over 10 years. My company is in the process of migrating from Cisco Firepower to Palo.
Dave Easterday at Comcast
Verified via Reviews.io
It was great and to the point. Panorama is not that complex, but we touched everything and had plenty of times for labs.
Ari Pitkäranta at Bayer OY
Verified via Reviews.io
It was a really tight package on best practices, how-to, tips and hints. Material was comprehensive and labs were supporting it. Encouraged to break things in lab was a good hint, because things will go wrong, and when they do, its good to know how to recover. If You are planning to put up panorama, this would be the course to do before that, after the initial FW setups, once you know the basics.
William Vega at State Farm
Verified via Reviews.io
Everything is good except 1 potential error in the lab guide. On page 171 (Create a Default Log Forwarding Profile, Detailed Lab Guide), it says, "For Log Type, select Wildfire", but in the following screenshots the Log Type selected is Traffic.
That said, Yana was a great instructor and presented all the information clearly!
Taquann McKinney at Deloitte
Verified via Reviews.io
I believe this course is valuable. For someone who knew absolutely nothing about Palo Alto, this course really did a great job of familiarizing me with Palo Alto, how to manage firewalls using Panorama, and how to apply what I've learned to day-to-day activities.
Damian Rodriguez at NTT Data
Verified via Reviews.io
The course overall was really good. All the chapters are explained properly. Personally I would argue that this course would be better suited for 3 days instead of 2 days. That way is not everything rushed and allows time for the information to sink in
Page 1 of 2
Course agenda
Explore the complete Panorama: NGFW Management agenda.
The “Panorama: NGFW Management” course covers the following content.
Select a module to see its topics and lab activities.
Adding Firewalls to Panorama
- Adding New Firewalls to Panorama
- Add a FireWall
- Automated Commit recovery
- Automatically Add multiple FireWalls via CSV import
- Tagging
- Organizing Summary Information
- Secure Communication Settings
- Manage device licenses
- Master key
- Upgrade firewalls from Panorama
- Deploy Content ID Updates to firewalls from Panorama
- Lab
- Set location for firewalls
- Copy serial firewall numbers
- Configure firewalls to communicate with Panorama
- Add firewalls to Panorama
- Modify Summary Window columns
- Assign firewall Tags
- Verify firewall licenses
- Schedule Dynamic Updates for firewalls
Initial Configuration
- Panorama solution overview
- Deployment options
- Panorama platforms
- Register and License Panorama
- GUI overview
- Panorama License and Software update
- Plugin Architecture
- Services and Interface Configuration
- Panorama Commits
- Configuration Management
- Config Operations
- Manage Backup incl. export device state from FireWall
- Config export
- Lab
- Lab Overview
- Connect to the lab environment
- Log in to the Panorama appliance and both firewalls
- Document configuration and license information
- Configure Panorama Management Interface
- Configure Panorama Settings
- Schedule automatic config exports
- Schedule Content Updates
- Save and export Panorama configuration
- Commit changes
Templates
- Templates overview
- Configuring templates
- Device configuration via template
- Local overwrite
- Template Variables
- Overview
- Configuration
- Real-life use cases and best practices
- Lab
- Create templates
- Create template stacks
- Create template variables
- Push the template stack to managed devices
Device Groups
- Device groups overview
- Configuring Device Groups
- Setup Device-group hierarchy
- Group and push to HA Peers
- Objects
- Create an object – shared/disable override
- Override
- Move
- Device Group and template mapping
- Policies
- Rules Hierarchy
- Rulebase structuring
- Configure rules
- Move Rules
- Rulebase preview
- Unused Rules
- Policy rule targets
- Rule changes archive
- Audit Comments
- Tag-Based Rule Groups
- Real-life use cases and best practices
- Lab
- Create device groups
- Configure device group settings
Log Forwarding and Collection
- Design Considerations for Deployment
- Log storage and retention
- Determine the Log Rate
- Storage calculation
- Log retention
- Planning Considerations
- Panorama log event forwarding
- Lab
- Configure log forwarding on the firewalls
- Configure log settings on the firewalls
- Confirm log forwarding
Using Panorama Logs
- Customizing Log Tables
- Using Filters in Log Tables
- Exporting Filtered Data
- Lab
- Customize Log Tables in Panorama
- Create and Apply Filters in Log Tables
- Export Filtered Data
Administrative Accounts
- Authenticating Panorama administrators
- Panorama authentication methods
- Admin Role
- Creating Administrative Accounts
- Custom Panorama Admin incl. Admin Role
- Device Group and Template Admin incl. Access Domain and Admin Role
- Password Profile and Password Complexity
- External Authentication
- Authentication Profile
- LDAP Server Profile
- Concurrent Administration
- Config Lock
- Lab
- Create LDAP and RADIUS Server Profiles
- Configure Authentication Profiles for LDAP and RADIUS
- Configure admin roles
- Configure admin accounts
- Create access domains
- Demonstrate the use of commit locks
Aggregated Monitoring and Reporting
- Data Sources Used by Panorama
- Operational Information Available in Panorama
- Reporting Capabilities in Panorama
- Lab
- Examine Panorama ACC data
- Run reports on Panorama
- Explore App Scope
- Identify and respond to threats
Troubleshooting
- Health and Summary Information of Managed Firewalls
- Troubleshooting Communication Issues with Panorama
- Troubleshooting Commit Errors
- Test policy functionality
- Lab
- Troubleshoot connectivity issues with a firewall
- Troubleshoot various commit errors
- Troubleshoot loss of internet connectivity
Add-On: Transition a Firewall to Panorama ManagementOptional
- This is an additional module which is not part of the official course. The instructor will demo the import of an existing FireWall’s local configuration into Panorama and explain various caveats.
- Overview of Use Cases
- Import existing FireWall if Panorama wasn’t used so far
- Import local config after FireWall migration
- Import FireWall config that has been partially managed by Panorama
- Config import incl. caveats
- Dependency on Device config
- Caveats on fine-tuning the config
- Disable config sync in a HA cluster
Your next step
Choose the PRA-FW class that fits your schedule.
Compare dates and prices first. If you are still confirming timing, you can reserve this course for free or ask the training team for advice.