Book Image

Securing Remote Access in Palo Alto Networks

By : Tom Piens aka Piens aka 'reaper'
Book Image

Securing Remote Access in Palo Alto Networks

By: Tom Piens aka Piens aka 'reaper'

Overview of this book

This book builds on the content found in Mastering Palo Alto Networks, focusing on the different methods of establishing remote connectivity, automating log actions, and protecting against phishing attacks through user credential detection. Complete with step-by-step instructions, practical examples, and troubleshooting tips, you will gain a solid understanding of how to configure and deploy Palo Alto Networks remote access products. As you advance, you will learn how to design, deploy, and troubleshoot large-scale end-to-end user VPNs. Later, you will explore new features and discover how to incorporate them into your environment. By the end of this Palo Alto Networks book, you will have mastered the skills needed to design and configure SASE-compliant remote connectivity and prevent credential theft with credential detection.

Related Content you might be interested in

Current Title:

Small book image
Securing Remote Access in Palo Alto Networks
Tom Piens aka Piens aka 'reaper'
Jul, 2021 | 336 pages
Small book image
Mastering Palo Alto Networks
Tom Piens aka reaper
Jun, 2022 | 636 pages
Small book image
OPNsense Beginner to Professional
Julio Cesar Bueno de Camargo
Jun, 2022 | 464 pages
Small book image
CCNA Security 210-260 Certification Guide
Glen D Singh | Vijay Anandh | Michael Vinod
Jun, 2018 | 518 pages
Table of Contents (11 chapters)
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Code in Action
Download the colour images
Conventions used
Get in touch
Reviews
1
Section 1: Leveraging the Cloud and Enabling Remote Access
Section 1: Leveraging the Cloud and Enabling Remote Access
Free Chapter
2
Chapter 1: Centralizing Logs
Chapter 1: Centralizing Logs
Technical requirements
Understanding log forwarding profiles and best practices
Learning about Panorama and log collectors
Forwarding logs to syslog, SMTP, and other options
Exploring log forwarding profiles
Troubleshooting logs and log forwarding
Summary
3
Chapter 2: Configuring Advanced GlobalProtect Features
Chapter 2: Configuring Advanced GlobalProtect Features
Technical requirements
Learning about advanced configuration features
Leveraging quarantine to isolate agents
Practical troubleshooting for GlobalProtect issues
Summary
4
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Technical requirements
Configuring a site-to-site VPN connection
Summary
5
Chapter 4: Configuring Prisma Access
Chapter 4: Configuring Prisma Access
Technical requirements
Configuring Prisma Access
Configuring the service infrastructure
Configuring the service connection
Configuring directory sync
Configuring mobile users
Configuring remote networks
Configuring the remote firewalls
Configuring Cortex Data Lake
Summary
6
Section 2: Tools, Troubleshooting, and Best Practices
Section 2: Tools, Troubleshooting, and Best Practices
7
Chapter 5: Enabling Features to Improve Your Security Posture
Chapter 5: Enabling Features to Improve Your Security Posture
Technical requirements
Hardening the management interface
EDLs
Summary
8
Chapter 6: Anti-Phishing with User Credential Detection
Chapter 6: Anti-Phishing with User Credential Detection
Technical requirements
Preparing the firewall for credential detection
Using IP user mapping for credential detection
Using group mapping for credential detection
Using domain credential filter
Summary
9
Chapter 7: Practical Troubleshooting and Best Practices Tools
Chapter 7: Practical Troubleshooting and Best Practices Tools
Technical requirements
Troubleshooting User-ID
Troubleshooting NAT
BPA tool
Summary
Why subscribe?
10
Other Books You May Enjoy
Other Books You May Enjoy
Packt is searching for authors like you
Leave a review - let other readers know what you think

BPA tool

The BPA tool is a free tool made available to all customers and partners of Palo Alto Networks and can be run directly from the support portal at https://support.paloaltonetworks.com.

The BPA tool can ingest a tech support file (TSF), which contains the device configuration and device metrics, and perform an analysis against a database of best practices. The output can be used to further button down the configuration.

First, we will need to generate and collect a TSF. Go to Device > Support and click Generate Tech Support File, as illustrated in the following screenshot:

Figure 7.21 – Generating a TSF

Note

While the TSF is being generated, the web interface will be greyed out and can't be used by the admin that initiated the operation. Commit jobs, including automated content updates, are paused until the file is generated.

The file can also be exported via secure copy (scp) or Trivial File Transfer Protocol (tftp) via...

Previous Section
End of Section 5
Next Section