PA-ATM231: Advanced Threat Management (PAN-EDU 231)

This instructor-led course teaches strategies in defense against advanced threats. Successful completion of this course enables administrators to better understand the threat landscape. Students will learn the use of Palo Alto Networks® Next-Generation firewalls, including the WildFire™ product.

Threat Management Course is for students who want to understand Advanced Threats and their characteristics. Students will learn how to manage advanced threats using security policies, profiles, and signatures to protect their network against emerging threats.

After successfully completing this course, you should be able to:

• Manage advanced threats using security policies, profiles, and signatures to protect networks against emerging threats
• Gain an understanding of the variety of advanced threats and their characteristics
• Learn to investigate attacks with Palo Alto, using Threat Vault, AppScope and other features
• Learn to handle zero-day attacks
• Learn to create custom threat signatures
  
  

Course Outline

Chapter 1: Course Introduction

Chapter 2: Threat Landscape

• Palo Alto Networks Technologies
• WildFire Architecture
• Advanced Persistent Threats
• Threat Management Strategies

Chapter 3: Integrated Approach to Threat Protection

• Apply Best Practices
• Reduce the Attack Surface
• Control Attack Methodology

Chapter 4: Handling Known Threats

• Configuring Security Profiles
• Zone and DoS Protection
• Control Advance Threat Enablers
• Handling Drive-By Downloads

Chapter 5: Investigating Attacks

• Threat Vault
• Wildfire Logs and Reports
• Log Correlation
• Using AppScope
• Creating Custom App-IDs

Chapter 6: Dealing with Zero-Day Attacks

• Researching Threat Events
• Identifying Unknown Threats
• Finding Infected Hosts

Chapter 7: Creating Custom Threat Signatures

• Build Custom Signatures
• Create Emerging Threat Signature
  
  

Labs

You will spend approximately 50% of class in hands-on labs.

This course is recommended for firewall administrators, network security administrators, and technical professionals. Students will better understand the threat landscape and learn the use of Palo Alto Networks® Next-Generation firewalls, including the WildFire™ product. In addition, students learn how to manage advanced threats using security policies, profiles, and signatures to protect their network against emerging threats.

Prior to attending this course, students should have

• An understanding of network concepts, including routing, switching, and IP addressing
• In-depth knowledge of port-based security and security technologies such as IPX, proxy, and content filtering