Book Image

Securing Remote Access in Palo Alto Networks

By : Tom Piens aka Piens aka 'reaper'
Book Image

Securing Remote Access in Palo Alto Networks

By: Tom Piens aka Piens aka 'reaper'

Overview of this book

This book builds on the content found in Mastering Palo Alto Networks, focusing on the different methods of establishing remote connectivity, automating log actions, and protecting against phishing attacks through user credential detection. Complete with step-by-step instructions, practical examples, and troubleshooting tips, you will gain a solid understanding of how to configure and deploy Palo Alto Networks remote access products. As you advance, you will learn how to design, deploy, and troubleshoot large-scale end-to-end user VPNs. Later, you will explore new features and discover how to incorporate them into your environment. By the end of this Palo Alto Networks book, you will have mastered the skills needed to design and configure SASE-compliant remote connectivity and prevent credential theft with credential detection.

Related Content you might be interested in

Current Title:

Small book image
Securing Remote Access in Palo Alto Networks
Tom Piens aka Piens aka 'reaper'
Jul, 2021 | 336 pages
Small book image
Mastering Palo Alto Networks
Tom Piens aka reaper
Jun, 2022 | 636 pages
Small book image
OPNsense Beginner to Professional
Julio Cesar Bueno de Camargo
Jun, 2022 | 464 pages
Small book image
CCNA Security 210-260 Certification Guide
Glen D Singh | Vijay Anandh | Michael Vinod
Jun, 2018 | 518 pages
Table of Contents (11 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Code in Action
Download the colour images
Conventions used
Get in touch
Reviews
1
Section 1: Leveraging the Cloud and Enabling Remote Access
Section 1: Leveraging the Cloud and Enabling Remote Access
Free Chapter
2
Chapter 1: Centralizing Logs
Chapter 1: Centralizing Logs
Technical requirements
Understanding log forwarding profiles and best practices
Learning about Panorama and log collectors
Forwarding logs to syslog, SMTP, and other options
Exploring log forwarding profiles
Troubleshooting logs and log forwarding
Summary
3
Chapter 2: Configuring Advanced GlobalProtect Features
Chapter 2: Configuring Advanced GlobalProtect Features
Technical requirements
Learning about advanced configuration features
Leveraging quarantine to isolate agents
Practical troubleshooting for GlobalProtect issues
Summary
4
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Technical requirements
Configuring a site-to-site VPN connection
Summary
5
Chapter 4: Configuring Prisma Access
Chapter 4: Configuring Prisma Access
Technical requirements
Configuring Prisma Access
Configuring the service infrastructure
Configuring the service connection
Configuring directory sync
Configuring mobile users
Configuring remote networks
Configuring the remote firewalls
Configuring Cortex Data Lake
Summary
6
Section 2: Tools, Troubleshooting, and Best Practices
Section 2: Tools, Troubleshooting, and Best Practices
7
Chapter 5: Enabling Features to Improve Your Security Posture
Chapter 5: Enabling Features to Improve Your Security Posture
Technical requirements
Hardening the management interface
EDLs
Summary
8
Chapter 6: Anti-Phishing with User Credential Detection
Chapter 6: Anti-Phishing with User Credential Detection
Technical requirements
Preparing the firewall for credential detection
Using IP user mapping for credential detection
Using group mapping for credential detection
Using domain credential filter
Summary
9
Chapter 7: Practical Troubleshooting and Best Practices Tools
Chapter 7: Practical Troubleshooting and Best Practices Tools
Technical requirements
Troubleshooting User-ID
Troubleshooting NAT
BPA tool
Summary
Why subscribe?
10
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Leave a review - let other readers know what you think

Configuring the service infrastructure

The first thing that needs to be configured is the service infrastructure, as illustrated in the following screenshot. This is essentially the virtual network "inside" Prisma Access that serves as the backbone between remote networks, service connections, GlobalProtect users, and the internet. This needs to exist before any other component can be configured and needs a subnet that does not overlap anywhere else in the company.

On the Service Setup menu item, click the cog wheel to configure the service infrastructure.

In the General tab, do the following:

  • Provide an infrastructure subnet that does not overlap with any internal networks. Choose wisely because once this network has been configured, it can't be changed.
  • A Border Gateway Protocol Autonomous System (BGP AS) is present and can be changed if an internal BGP is used for enterprise-wide routing. If no dynamic routing is used, the BGP AS can remain unchanged...
Previous Section
End of Section 4
Next Section