PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231)

  

 

Course Overview:  PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231) Training Class is a two-day course that teaches students strategies in defense against cyberthreats.  Successful completion of this course enables administrators to better understand the threat landscape.  This is not a virtualized theoretical course.  This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk.  Real hardware per student for real experience and real skill development.  TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies.  Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

Attendees to the PA-242: Palo Alto Networks Firewall Manaage Cyberthreats  (EDU-231) Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 2 days

Course Objectives:   Students attending this training course will gain an understanding of cyberthreats and their characteristics.  Students will learn how to manage cyberthreats using security policies, profiles, and signatures to protect their network against emerging threats.

Day 1

  • Mod 1: Threat Landscape
    • Advanced Persistent
    • Threats
    • Data Breaches and Tactics
    • Threat Management
    • Strategies
  • Mod 2: Integrated
    • Approach to Threat
    • Protection
    • Integrated Approach to
    • Protection
    • Next-Generation Firewall
    • Advanced Endpoint
    • Protection
  • Mod 3: Network Visibility
    • Zero Trust Model
    • SSL Decryption
    • Decryption Policy
  • Mod 4: Reducing the Attack
    • Surf
    • ection

 

Day 2

  • Mod 5: Handling Known
    • Threats
    • WildFire Analysis
    • Security Profiles
  • Mod 6: Handling Unknown
    • Traffic and Zero-Day Exploits
    • WildFire
    • Researching Threat Events
    • Identifying Unknown
    • Applications
  • Mod 7: Investigating
    • Breaches
    • Identify IOCs Using
    • App-Scope
    • Log Correlation
    • Finding Infected Host
  • Mod 8: Using Custom
    • Signatures
    • Creating Custom App-IDs
    • Threat Signatures

A

Prerequisites:

  • Students must complete the PA-213: Install, Configure, and Manage course
  • Understanding of network concepts, including routing, switching, and IP addressing
  • In-depth knowledge of port-based security and security technologies such as IPS, proxy, and content filtering

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class?  Then let everyone know!

Welcome to TechNow!

Welcome to TechNow! The Leader in Information Security Training & Computer Training.

The world of information security and computer training is ever changing.  The techniques and systems continue to evolve and we must stay current and diligent.  To do this, you can count on TechNow®…the leader in cybersecurity training and computer system training.

TechNow® has been training the leaders in the computer community for many years.  We provide training for students in a number of areas.  Our cybersecurity trainings include popular courses like D0D 8140, Security , CISM, CISSP, CEH,CCNA, and more.  With over 34 years of experience, we’re able to provide you with unmatched training and certification programs.

TechNow also provides a variety of other popular trainings for the computer professional including Cisco, EC-Council, CompTIA, Unix/Linux and more.

.

Search Our Site

Upcoming Events

  • CT-213: Cloud Essentials+
    • 10/14/2025 – 10/16/2025
    • San Antonio
  • PM-223: Introduction to Project Management
    • 10/14/2025 – 10/16/2025
    • San Antonio
  • CT-210: Project+
    • 10/27/2025 – 10/30/2025
    • San Antonio
  • CT-325: Security+
    • 10/27/2025 – 10/31/2025
    • San Antonio
  • PM-325: Project Management Professional (PMP) Exam Preparation
    • 10/27/2025 – 10/31/2025
    • San Antonio
  • all events

    • in   

    TN-555: Certified Ethical Hacker v13 (CEH)

    Course Overview:

    This CEH course will immerse you into a “Hacker Mindset” in order to teach you how to think like a hacker and better defend against future attacks. Students are in the driver’s seat with a hands-on training environment employing a systematic ethical hacking process. All while teaching students how to scan, test, hack, and secure target systems. CEH shows how hackers think and act maliciously so you can learn to better position your organization’s security infrastructure and defend against future attacks.

    This CEH course covers the Five Phases of Ethical Hacking, diving into Reconnaissance, Gaining Access, Enumeration, Maintaining Access, and covering your tracks.

    This CEH course delivers in-demand ethical hacking skills while preparing you for the internationally-recognized Certified Ethical Hacker (CEH) certification exam  from EC-Council.

    This course supports a certification that is DoD approved 8570 Baseline Certificate and meets DoD 8140/8570 training requirements.

    What’s Included:

    • EC-Council official E-Courseware
    • EC-Council official iLabs code with access for 6 months
    • EC-Council official Certificate of Attendance
    • CEH Exam Voucher

     

    Security Course Flow
    Document Flow Chart iconsm

    Dates/Locations:

    Date/Time Event
    11/17/2025 - 11/21/2025
    08:00 -16:00     		TN-555: Certified Ethical Hacker v13 (CEH)
    TechNow, Inc, San Antonio TX

    Duration: 5 Days

    Course Content:

    • Module 01. Introduction to Ethical Hacking
    • Module 02. Foot-printing and Reconnaissance
    • Module 03. Scanning Networks
    • Module 04. Enumeration
    • Module 05. Vulnerable Analysis
    • Module 06. System Hacking
    • Module 07. Malware Threats
    • Module 08. Sniffing
    • Module 09. Social Engineering
    • Module 10. Denial-of-Service
    • Module 11. Session Hijacking
    • Module 12. Evading IDS,Firewalls, and Honeypots
    • Module 13. Hacking Web Servers
    • Module 14. Hacking Web Applications
    • Module 15. SQL Injection
    • Module 16. Hacking Wireless Networks
    • Module 17. Hacking Mobile Platforms
    • Module 18. IoT and OT Hacking
    • Module 19. Cloud Computing
    • Module 20. Cryptography

     

    Prerequisites:

    • Windows operating system and/or Linux operating system or other Unix-based OS
    • TCP/IP protocols and implementation
    • At least 2 years of IT security experience
    • TN-325:Security+

    Target Audience:

    Information Security Analyst/Administrator, Information Assurance (IA) Security Officer, Information Security Manager/Specialist, Auditors, Security Professional, Site Admins, Penetration Testers, Red Team,Risk/Threat/Vulnerability Analyst, Individuals concerned about the integrity of network infrastructure

     

    About us:

    TechNow has taught security courses for almost 30 years, before most certifications existed and has successfully moved students through certification programs associated with IAPP, SANS, EC-Council and ISC2. Our instructor maintains over a dozen security certifications and has been the director of a company with internationals sales in security training, consulting, and compliance.

    Tech Now, Inc. is an accredited Training Center with Ec-Council.

    Comments

    Latest comments from students

    Liked the class?  Then let everyone know!

    TN-515: Implementing Cybersecurity and Information Assurance Methodologies

      

    Course Overview: 

    Learn to protect yourself and your company against hackers, by learning their tools and techniques, and then testing your network.  This course is heavily based on Kali and primarily on Metasploit.  In TN-515: Implementing Cybersecurity and Information Assurance Methodologies class you will learn the step by step process that hackers use to assess your enterprise network, probe it & hack into it, utilizing a mixed-platform target environment including Windows, Linux, Solaris, and Cisco.  This course is 90% hacking, but  defenses for demonstrated hacks will be discussed.  If you want to know the ins and outs of the hacks presented in this course, then this is the course for you.

    Attendees to TN-515: Implementing Cybersecurity and Information Assurance Methodologies Class Attendees will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration: 5 Days

    Course Objectives:

    • Introduction to Pen Testing using the PTES model
    • Metasploit Basics
      • MSFconsole, MSFcli, Armitage, MSFpayload, MSFencode, NasmShell
    • Intelligence Gathering
      • Nmap, Databases in Metasploit, Port Scanning with Metasploit
    • Quick Intro to Ruby
      • Writing a simple Ruby script to create a custom scanner
    • Vulnerability Scanning
      • Importing Nessus Results
      • Scanning with Nessus from Within Metasploit
    • Exploitation
      • Using the Metasploit Framework and console to exploit
    • Meterpreter
      • Compromising a Windows System
      • Attacking MS SQL, xp_cmdshell
      • Dumping Usernames and Passwords, extracting and dumping hashes
      • Pass the Hash and Token Impersonation
      • Pivoting
      • Railgun
      • Using Meterpreter Scripts: Migrating a process, Killing AV, Persistence
    • Avoiding Detection
      • Creating Stand-Alone Binaries with MSFpayload
      • Encoding with MSFencode and Packers (go Green Bay:)
    • Exploitation Using Client Side Attacks
      • Introduction to Immunity Debugger
      • Using Immunity Debugger to Decipher NOP Shellcode
    • Metasploit Auxiliary Modules
    • Social Engineer Toolkit (SET)
      • Spear-Phishing, Web Attack
      • Creating a Multipronged Attack
    • Creating Your Own Module
      • Adapt an existing Module
      • Add some PowerShell and Run the Exploit
    • Meterpreter Scripting
    • Capture The Flag Exercise

    Prerequisites:

    • This is an advanced  Cybersecurity and Information Assurance Course which requires basic Windows & UNIX competency
    • Certification or 2 years of experience in these operating systems is highly recommended
    • An understanding of TCP/IP

    Comments

    Latest comments from students

      

    Liked the class?  Then let everyone know!

    TN-315: Complete Hack and Defend

     

    Course Overview:

    Learn to protect yourself and your company against hackers, by learning their tools and techniques, and then testing your network.  This course is heavily based on Kali and primarily on Metasploit.  In TN-315: Complete Hack and Defend class you will learn the step by step process that hackers use to assess your enterprise network, probe it & hack into it in mixed-platform environment including Windows, Linux, Solaris, and Cisco.  This course is 90% hacking, but  defenses for demonstrated hacks will be discussed.  If you want to know the ins and outs of the hacks presented in this course, then this is the course for you.

    Attendees to TN-315: Complete Hack & Defend Class Attendees will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration: 5 Days

    Course Objectives:

    • Introduction to Pen Testing using the PTES model
    • Metasploit Basics
      • MSFconsole, MSFcli, Armitage, MSFpayload, MSFencode, NasmShell
    • Intelligence Gathering
      • Nmap, Databases in Metasploit, Port Scanning with Metasploit
    • Quick Intro to Ruby
      • Writing a simple Ruby script to create a custom scanner
    • Vulnerability Scanning
      • Importing Nessus Results
      • Scanning with Nessus from Within Metasploit
    • Exploitation
      • Using the Metasploit Framework and console to exploit
    • Meterpreter
      • Compromising a Windows System
      • Attacking MS SQL, xp_cmdshell
      • Dumping Usernames and Passwords, extracting and dumping hashes
      • Pass the Hash and Token Impersonation
      • Pivoting
      • Railgun
      • Using Meterpreter Scripts: Migrating a process, Killing AV, Persistence
    • Avoiding Detection
      • Creating Stand-Alone Binaries with MSFpayload
      • Encoding with MSFencode and Packers (go Green Bay:)
    • Exploitation Using Client Side Attacks
      • Introduction to Immunity Debugger
      • Using Immunity Debugger to Decipher NOP Shellcode
    • Metasploit Auxiliary Modules
    • Social Engineer Toolkit (SET)
      • Spear-Phishing, Web Attack
      • Creating a Multipronged Attack
    • Creating Your Own Module
      • Adapt an existing Module
      • Add some PowerShell and Run the Exploit
    • Meterpreter Scripting
    • Capture The Flag Exercise

    Prerequisites:

    • This is an advanced Information Security Course which requires basic Windows & UNIX competency
    • Certification or 2 years of experience in these operating systems is highly recommended
    • An understanding of TCP/IP

    Comments

    Latest comments from students

    User: dhonore

    Instructor comments: Dave's presentation style is engaging and lively.

    Facilities comments: The room was adequate for the needs of the class.

    User: phouck

    Instructor comments: David was very good. Although he went very fast at times.

    Facilities comments: The room was ok. it was bit dark.

     

    Liked the class?  Then let everyone know!