Book Image

Securing Remote Access in Palo Alto Networks

By : Tom Piens aka Piens aka 'reaper'
Book Image

Securing Remote Access in Palo Alto Networks

By: Tom Piens aka Piens aka 'reaper'

Overview of this book

This book builds on the content found in Mastering Palo Alto Networks, focusing on the different methods of establishing remote connectivity, automating log actions, and protecting against phishing attacks through user credential detection. Complete with step-by-step instructions, practical examples, and troubleshooting tips, you will gain a solid understanding of how to configure and deploy Palo Alto Networks remote access products. As you advance, you will learn how to design, deploy, and troubleshoot large-scale end-to-end user VPNs. Later, you will explore new features and discover how to incorporate them into your environment. By the end of this Palo Alto Networks book, you will have mastered the skills needed to design and configure SASE-compliant remote connectivity and prevent credential theft with credential detection.

Related Content you might be interested in

Current Title:

Small book image
Securing Remote Access in Palo Alto Networks
Tom Piens aka Piens aka 'reaper'
Jul, 2021 | 336 pages
Small book image
Mastering Palo Alto Networks
Tom Piens aka reaper
Jun, 2022 | 636 pages
Small book image
OPNsense Beginner to Professional
Julio Cesar Bueno de Camargo
Jun, 2022 | 464 pages
Small book image
CCNA Security 210-260 Certification Guide
Glen D Singh | Vijay Anandh | Michael Vinod
Jun, 2018 | 518 pages
Table of Contents (11 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Code in Action
Download the colour images
Conventions used
Get in touch
Reviews
1
Section 1: Leveraging the Cloud and Enabling Remote Access
Section 1: Leveraging the Cloud and Enabling Remote Access
Free Chapter
2
Chapter 1: Centralizing Logs
Chapter 1: Centralizing Logs
Technical requirements
Understanding log forwarding profiles and best practices
Learning about Panorama and log collectors
Forwarding logs to syslog, SMTP, and other options
Exploring log forwarding profiles
Troubleshooting logs and log forwarding
Summary
3
Chapter 2: Configuring Advanced GlobalProtect Features
Chapter 2: Configuring Advanced GlobalProtect Features
Technical requirements
Learning about advanced configuration features
Leveraging quarantine to isolate agents
Practical troubleshooting for GlobalProtect issues
Summary
4
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Technical requirements
Configuring a site-to-site VPN connection
Summary
5
Chapter 4: Configuring Prisma Access
Chapter 4: Configuring Prisma Access
Technical requirements
Configuring Prisma Access
Configuring the service infrastructure
Configuring the service connection
Configuring directory sync
Configuring mobile users
Configuring remote networks
Configuring the remote firewalls
Configuring Cortex Data Lake
Summary
6
Section 2: Tools, Troubleshooting, and Best Practices
Section 2: Tools, Troubleshooting, and Best Practices
7
Chapter 5: Enabling Features to Improve Your Security Posture
Chapter 5: Enabling Features to Improve Your Security Posture
Technical requirements
Hardening the management interface
EDLs
Summary
8
Chapter 6: Anti-Phishing with User Credential Detection
Chapter 6: Anti-Phishing with User Credential Detection
Technical requirements
Preparing the firewall for credential detection
Using IP user mapping for credential detection
Using group mapping for credential detection
Using domain credential filter
Summary
9
Chapter 7: Practical Troubleshooting and Best Practices Tools
Chapter 7: Practical Troubleshooting and Best Practices Tools
Technical requirements
Troubleshooting User-ID
Troubleshooting NAT
BPA tool
Summary
Why subscribe?
10
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Leave a review - let other readers know what you think

Chapter 2: Configuring Advanced GlobalProtect Features

In this chapter, you will learn about the advanced features in GlobalProtect that will allow for more versatility and security in remote user deployments. We will learn about authentication methods and configuration methods that can dynamically change the user experience, depending on the user's needs and the security of the corporate network.

These features will allow you to gain more control over the endpoints while integrating the user experience into the latest generation of Single Sign-On (SSO) authentication and the always-on way of working. By the end of this chapter, you will be able to configure SAML-based SSO and ensure endpoints are always protected in an optimal fashion. In this chapter, we are going to cover the following main topics:

  • Learning about advanced configuration features
  • Leveraging quarantine to isolate agents
  • Practical troubleshooting for GlobalProtect issues
Previous Section
End of Section 1
Next Section