Observations of Instructor Led Training with Real Hardware

TechNow has heard many students talk about virtualized/remote training that TechNow Does Not Do.  While training our most recent offering of PA-215: Palo Alto Networks Firewall Essentials FastTrack a student told his story of how he endend up in our course.  His story we have heard for other technologies like Cisco, VMware, BlueCoat and other products.

A large percentage of training is moving to the virtualized/remote lab environments.  Students are asked to use some variant of remote access software and remote into the training company's lab environment. Our student in our Palo Alto Networks Firewall course informed us that he went to a very costly offering of that course from the vendor and was not able to perform any labs.  There were either network connectivity issues, or issues with the remote access software, or other problems.  The whole training experience was very frustrating and not productive.

We keep our labs open to students if they would like after hours, or before hours access.  Repeatedly going through a lab engrains that knowledge for later recall.  Touching hardware is so critical in understanding the problems that arise when a cable comes loose, or a cable gets plugged in the wrong port.  There are other scenarios such as just pulling the power cable, or turning off a power strip, or accidently overwriting a configuration.  These disaster scenarious requires hands-on physical access to hardware.  Preventing and recovering from disasters is what it's all about, and that requires hands-on, instructor led, real hardware.

Contact Us

    After you press "Request Information" near the bottom of this form, within 30 seconds, status will be provided at the bottom of the form

    Tech Now can provide on-site training anywhere in the world. We'll customize a training package to meet your needs!

    First Name*

    Last Name*

    Your Email*

    Your Company*

    Your State*

    Area of Interest

    Phone

    Questions:

    After you press "Request Information" on this form, within 30 seconds, status will be provided at the bottom of the form

    from page:

    in   

    PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231)

      

     

    Course Overview:  PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231) Training Class is a two-day course that teaches students strategies in defense against cyberthreats.  Successful completion of this course enables administrators to better understand the threat landscape.  This is not a virtualized theoretical course.  This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

    Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk.  Real hardware per student for real experience and real skill development.  TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

    The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies.  Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

    Attendees to the PA-242: Palo Alto Networks Firewall Manaage Cyberthreats  (EDU-231) Training Course will receive TechNow approved course materials and expert instruction.

    Dates/Locations:

    No Events

    Duration: 2 days

    Course Objectives:   Students attending this training course will gain an understanding of cyberthreats and their characteristics.  Students will learn how to manage cyberthreats using security policies, profiles, and signatures to protect their network against emerging threats.

    Day 1

    • Mod 1: Threat Landscape
      • Advanced Persistent
      • Threats
      • Data Breaches and Tactics
      • Threat Management
      • Strategies
    • Mod 2: Integrated
      • Approach to Threat
      • Protection
      • Integrated Approach to
      • Protection
      • Next-Generation Firewall
      • Advanced Endpoint
      • Protection
    • Mod 3: Network Visibility
      • Zero Trust Model
      • SSL Decryption
      • Decryption Policy
    • Mod 4: Reducing the Attack
      • Surf
      • ection

     

    Day 2

    • Mod 5: Handling Known
      • Threats
      • WildFire Analysis
      • Security Profiles
    • Mod 6: Handling Unknown
      • Traffic and Zero-Day Exploits
      • WildFire
      • Researching Threat Events
      • Identifying Unknown
      • Applications
    • Mod 7: Investigating
      • Breaches
      • Identify IOCs Using
      • App-Scope
      • Log Correlation
      • Finding Infected Host
    • Mod 8: Using Custom
      • Signatures
      • Creating Custom App-IDs
      • Threat Signatures

    A

    Prerequisites:

    • Students must complete the PA-213: Install, Configure, and Manage course
    • Understanding of network concepts, including routing, switching, and IP addressing
    • In-depth knowledge of port-based security and security technologies such as IPS, proxy, and content filtering

    This course is in no way associated with Palo Alto Networks, Inc.

    Comments

    Latest comments from students

    Like the class?  Then let everyone know!

    N-505: CISCO DoD Comply to Connect (C2C)

    Course Overview:

     Cisco DoD Comply-to-Connect (C2C) course teaches you how to implement and deploy a Department of Defense (DoD) Comply-to-Connect network architecture using Cisco Identity Services Engine (ISE). This training covers implementation of 802.1X for both wired and wireless devices and how Cisco ISE uses that information to apply policy control and enforcement. Additionally, other topics like supplicants, non-supplicants, ISE profiler, authentication, authorization, and accounting (AAA) and public key infrastructure (PKI) support, reporting and troubleshooting are covered. Finally, C2C specific use case scenarios are covered.

    This training also earns you 32 Continuing Education (CE) credits toward recertification.

    Dates/Locations:

    No Events

    Duration: 5 days

     

    Course Outline: 

    Section 1: C2C Fundamentals

    • Comply to Connect Overview
    • From C2C to ZTA
    • Steps to Implement C2C

    Section 2: Cisco Identity-Based Networking Services

    • Cisco IBNS Overview
    • AAA Role in Cisco IBNS
    • Compare Cisco IBNS and Cisco ISE Solutions
    • Explore Cisco IBNS Architecture Components

    Section 3: Introducing Cisco ISE Architecture

    • Cisco ISE as a Network Access Policy Engine
    • Cisco ISE Use Cases
    • Cisco ISE Functions

    Section 4: Introducing Cisco ISE Deployment

    • Cisco ISE Deployment Models
    • Cisco ISE Licensing and Network Requirements
    • Cisco ISE Context Visibility Features
    • New Features in Cisco ISE 3.X

    Section 5: Introducing Cisco ISE Policy Enforcement Components

    • 802.1X for Wired and Wireless Access
    • MAC Authentication Bypass for Wired and Wireless Access
    • Identity Management
    • Active Directory Identity Source
    • Additional Identity Sources
    • Certificate Services

    Section 6: Introducing Cisco ISE Policy Configuration

    • Cisco ISE Policy
    • Cisco ISE Authentication Rules
    • Cisco ISE Authorization Rules

    Section 7: PKI and Advanced Supplicants

    • Public Key Infrastructure (PKI)
    • TEAP in Comply to Connect (C2C)
    • Secure Client ISE features and Configuration for C2C

    Section 8: Introducing the Cisco ISE Profiler

    • Web Access with Cisco ISE
    • ISE Profiler
    • Cisco ISE Probes
    • Profiling Policy
    • Custom Attributes in Profile

    Section 9: Introducing Cisco ISE Endpoint Compliance Services

    • Endpoint Compliance Services Overview

    Section 10: Configuring Client Posture Services and Compliance

    • Client Posture Services and Provisioning Configuration

    Section 11: Introducing Profiling Best Practices and Reporting

    • Profiling Best Practices

    Section 12: C2C Use Cases

    • Cisco CX ISE Reporting Tool
    • ISE Reporting
    • ISE Hardening
    • Profiling Best Practices for C2C

    Section 13: C2C Third-Party Integrations-Tenable

    • Tenable Use Case
    • Tenable Overview and Capabilities
    • Tenable Integration Prerequisites
    • Tenable Integration Configuration
    • Policy Design
    • Policy Enforcement
    • Enforcement Verification

    Section 14: C2C Third-Party Integrations-MECM

    • MECM Use Case
    • MECM Overview and Capabilities
    • MECM Integration Prerequisites
    • MECM Integration Configuration
    • Policy Design
    • Policy Enforcement
    • Enforcement Verification

    Section 15: C2C Third-Party Integrations-Trellix

    • Trellix Use Case
    • Trellix Overview and Capabilities
    • Trellix Integration Prerequisites
    • Trellix Integration Configuration
    • Policy Enforcement
    • Enforcement Verification

    Section 16: Troubleshooting Cisco ISE Policy and Third-Party NAD

    • Cisco ISE Third-Party Network Access Device Support
    • Troubleshooting Cisco ISE Policy Configuration

    Section 17: Exploring Cisco TrustSec

    • Cisco TrustSec Overview
    • Cisco TrustSec Enhancements
    • Cisco TrustSec Configuration

    Section 18: Working with Network Access Devices

    • Reviewing AAA
    • Cisco ISE TACACS+ Device Administration
    • Configuring TACACS+ Device Administration
    • TACACS+ Device Administration Guidelines and Best Practices

     

    Course Prerequisites: 

    There are no prerequisites for this training. However, the knowledge and skills you are recommended to have before attending this training are:

    • Familiarity with 802.1X
    • Familiarity with Microsoft Windows Operating Systems
    • Familiarity with Cisco IOS CLI for wired and wireless network devices
    • Familiarity with Cisco Identity Service Engine

    Virtualization/Cloud

    TechNow has been involved in enterprise client server architectures since 1990.  TechNow has delivered  national and international implementations for Valero, Wholefoods, Quest, USAA, Golfsmith, AMD, Motorola, and many other fortune 1000 corporations, 

    TechNow's training program has followed the evolution of enterprise computing into virtualization and cloud computing. With a focus on security, TechNow can present the ramifications of many centralized strategies.  All courses utilize enterprise instructors with experience and can discuss the detail of implementation and the integration into an existing infrastructure.

    in