Book Image

Securing Remote Access in Palo Alto Networks

By : Tom Piens aka Piens aka 'reaper'
Book Image

Securing Remote Access in Palo Alto Networks

By: Tom Piens aka Piens aka 'reaper'

Overview of this book

This book builds on the content found in Mastering Palo Alto Networks, focusing on the different methods of establishing remote connectivity, automating log actions, and protecting against phishing attacks through user credential detection. Complete with step-by-step instructions, practical examples, and troubleshooting tips, you will gain a solid understanding of how to configure and deploy Palo Alto Networks remote access products. As you advance, you will learn how to design, deploy, and troubleshoot large-scale end-to-end user VPNs. Later, you will explore new features and discover how to incorporate them into your environment. By the end of this Palo Alto Networks book, you will have mastered the skills needed to design and configure SASE-compliant remote connectivity and prevent credential theft with credential detection.
Table of Contents (11 chapters)
1
Section 1: Leveraging the Cloud and Enabling Remote Access
6
Section 2: Tools, Troubleshooting, and Best Practices

Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs

In this chapter, we're going to learn about various ways to configure a site-to-site Virtual Private Network (VPN) connection. There are many different situations where exceptions need to be made to the standard way of setting up an Internet Protocol Security (IPSec) VPN connection. Every vendor seems to use different defaults, and every company has its own way of implementing VPN connections. During the process of establishing a secure tunnel between two sites, there may be a lot of negotiation required before you can come to a consensus about which parameters to use.

In this chapter, we're going to cover the following main topics:

  • Configuring a site-to-site VPN connection
  • Configuring the Large Scale VPN (LSVPN)
  • Troubleshooting VPN issues