CNSE 4.1 Exam Preparation GuideV3.pptx - Palo Alto Networks

More documents

Recommendations

Info

Blocking Skype • The skype application is classified on the PAN device as two separate applications: skype-probe and skype. • In general, think of the skype-probe application as the control channel, and “skype” application as the data channel. • Since skype is so evasive, the way you prevent skype from sending or receiving voice or video is by allowing skype-probe, but blocking skype. • This forces skype to use a communication that is easy to predict and block via App-ID Page 20 |
Monitoring Traffic • The default traffic log behavior is to log all at session close. On a per-rule basis, the functionality logging at session start/session end can be selectively toggled or disabled completely • Traffic log can be viewed under Monitor tab -> Logs -> Traffic. • The application that was detected is shown in the log. • Filters can be created, using a syntax similar to Wireshark Page 21 | - Here is an example where you are viewing all traffic between 1.2.3.4 and 3.3.3.11:
Page 1 and 2: Palo Alto Networks CNSE 4.1 Exam Pr
Page 3 and 4: General Advice • 100 multiple-cho
Page 5 and 6: PA appliances as of PAN-OS 4.1: 400
Page 7 and 8: PA Appliances as of PAN-OS 4.1: 200
Page 9 and 10: Logical Interfaces Supported • Su
Page 11 and 12: Available Features in Different Int
Page 13 and 14: Device Management • Managing the
Page 15 and 16: Application Selection Window Within
Page 17 and 18: Application Groups and Application
Page 19: Scheduling Security Policies • Po
Page 23 and 24: Log Forwarding • The logs on the
Page 25 and 26: Steps to Define a New Application 1
Page 27 and 28: Source Address Translation • NAT
Page 29 and 30: Security Profiles • Security Prof
Page 31 and 32: Anti-Virus Profiles Page 31 | • A
Page 33 and 34: Email Protocols and AV/Spyware Prot
Page 35 and 36: Custom Response Pages • Response
Page 37 and 38: URL Filtering Profile • Actions c
Page 39 and 40: Default Block Pages Page 39 |
Page 41 and 42: Data Filtering Overview • Scan tr
Page 43 and 44: Data Filtering Password Setup • P
Page 45 and 46: WildFire • WildFire relies upon t
Page 47 and 48: Packet Flow • Refer to this docum
Page 49 and 50: User-ID: Enterprise Directory Integ
Page 51 and 52: User-ID Agent Setup and Upgrade Pro
Page 53 and 54: Terminal Server Agent • Runs on t
Page 55 and 56: Captive Portal (2) • How to confi
Page 57 and 58: Steps to Configure an IPSec site-to
Page 59 and 60: GlobalProtect - SSL VPN • PAN-OS
Page 61 and 62: SSL Decryption • The Palo Alto fi
Page 63 and 64: Configuring SSL Outbound Decryption
Page 65 and 66: Misc. SSL Decryption • When SSL i
Page 67 and 68: HA Failure States • Link Failure
Page 69 and 70: Active/Active | HA3 interface • A
Page 71 and 72:
Panorama • Central source to view
Page 73 and 74:
Adding Devices to Panorama Page 73
Page 75 and 76:
View and Commit You can view a comb
Page 77:
Topics that have minimal or no ques
show all

CNSE 4.1 Exam Preparation GuideV3.pptx - Palo Alto Networks

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?