Understanding the Core Technologies

Welcome to the first chapter! In this book, we’re going to explore the ins and outs of the Palo Alto Networks Strata suite. We’ll start off by learning about all the different features of the firewall and how to configure them before we move on to more complex features and additional services that will help you complete your deployment. On the way, you’ll pick up important knowledge nuggets that will help you both understand the technology and pass the PCNSE exam.

In this chapter, we’re going to examine the core technologies that make up the Palo Alto Networks firewall. We are going to take a closer look at the way in which security zones control how security, Network Address Translation (NAT), and routing verdicts are made. We will review the mechanics behind App-ID and Content-ID so you get a deeper understanding of how packets are processed and security decisions are made by the firewall, and we will review how User-ID contributes to a more robust security stance by applying group-based or user-based access control.

This chapter will cover the following topics:

• Understanding the zone-based firewall
• Understanding App-ID and Content-ID
• The management and data planes
• Authenticating users with User-ID

By the end of this chapter, you will have a better understanding of how the core technology is built up and will be able to apply these skills when we start building configuration. If you’re preparing for the PCNSE exam, this chapter will also help you understand the fundamentals required to tackle some of the scenario-based questions.