Book Image

Securing Remote Access in Palo Alto Networks

By : Tom Piens aka Piens aka 'reaper'
Book Image

Securing Remote Access in Palo Alto Networks

By: Tom Piens aka Piens aka 'reaper'

Overview of this book

This book builds on the content found in Mastering Palo Alto Networks, focusing on the different methods of establishing remote connectivity, automating log actions, and protecting against phishing attacks through user credential detection. Complete with step-by-step instructions, practical examples, and troubleshooting tips, you will gain a solid understanding of how to configure and deploy Palo Alto Networks remote access products. As you advance, you will learn how to design, deploy, and troubleshoot large-scale end-to-end user VPNs. Later, you will explore new features and discover how to incorporate them into your environment. By the end of this Palo Alto Networks book, you will have mastered the skills needed to design and configure SASE-compliant remote connectivity and prevent credential theft with credential detection.

Related Content you might be interested in

Current Title:

Small book image
Securing Remote Access in Palo Alto Networks
Tom Piens aka Piens aka 'reaper'
Jul, 2021 | 336 pages
Small book image
Mastering Palo Alto Networks
Tom Piens aka reaper
Jun, 2022 | 636 pages
Small book image
OPNsense Beginner to Professional
Julio Cesar Bueno de Camargo
Jun, 2022 | 464 pages
Small book image
CCNA Security 210-260 Certification Guide
Glen D Singh | Vijay Anandh | Michael Vinod
Jun, 2018 | 518 pages
Table of Contents (11 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Code in Action
Download the colour images
Conventions used
Get in touch
Reviews
1
Section 1: Leveraging the Cloud and Enabling Remote Access
Section 1: Leveraging the Cloud and Enabling Remote Access
Free Chapter
2
Chapter 1: Centralizing Logs
Chapter 1: Centralizing Logs
Technical requirements
Understanding log forwarding profiles and best practices
Learning about Panorama and log collectors
Forwarding logs to syslog, SMTP, and other options
Exploring log forwarding profiles
Troubleshooting logs and log forwarding
Summary
3
Chapter 2: Configuring Advanced GlobalProtect Features
Chapter 2: Configuring Advanced GlobalProtect Features
Technical requirements
Learning about advanced configuration features
Leveraging quarantine to isolate agents
Practical troubleshooting for GlobalProtect issues
Summary
4
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Technical requirements
Configuring a site-to-site VPN connection
Summary
5
Chapter 4: Configuring Prisma Access
Chapter 4: Configuring Prisma Access
Technical requirements
Configuring Prisma Access
Configuring the service infrastructure
Configuring the service connection
Configuring directory sync
Configuring mobile users
Configuring remote networks
Configuring the remote firewalls
Configuring Cortex Data Lake
Summary
6
Section 2: Tools, Troubleshooting, and Best Practices
Section 2: Tools, Troubleshooting, and Best Practices
7
Chapter 5: Enabling Features to Improve Your Security Posture
Chapter 5: Enabling Features to Improve Your Security Posture
Technical requirements
Hardening the management interface
EDLs
Summary
8
Chapter 6: Anti-Phishing with User Credential Detection
Chapter 6: Anti-Phishing with User Credential Detection
Technical requirements
Preparing the firewall for credential detection
Using IP user mapping for credential detection
Using group mapping for credential detection
Using domain credential filter
Summary
9
Chapter 7: Practical Troubleshooting and Best Practices Tools
Chapter 7: Practical Troubleshooting and Best Practices Tools
Technical requirements
Troubleshooting User-ID
Troubleshooting NAT
BPA tool
Summary
Why subscribe?
10
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Leave a review - let other readers know what you think

Learning about advanced configuration features

In this section, we will take a look at the less common and more advanced features that can be set in GlobalProtect to provide more flexibility or increase security, or both. First, we will look at integrating authentication with Security Assertion Markup Language (SAML).

Integrating SAML into authentication methods

With more and more services moving to the cloud, it makes sense for organizations to also move (part of) their Active Directory into the cloud. This makes setting up authentication for GlobalProtect a little more challenging as there may no longer be an option, or a need, to use older protocols such as LDAP or RADIUS in favour of newer authentication standards such as SAML.

Configuring Microsoft Azure for SAML SSO

Microsoft Azure provides a user-friendly experience and has a free option with limited features but sufficient capabilities for you to experiment with, so I will start from Azure as a template for other...

Previous Section
End of Section 3
Next Section