Securing Remote Access in Palo Alto Networks: Practical techniques to enable and protect remote users, improve your security posture, and troubleshoot next-generation firewalls

Securing Remote Access in Palo Alto Networks
Contributors
About the author
About the reviewer
Preface
	Who this book is for
	What this book covers
	To get the most out of this book
	Code in Action
	Download the colour images
	Conventions used
	Get in touch
	Reviews
Section 1: Leveraging the Cloud and Enabling Remote Access
Chapter 1: Centralizing Logs
	Technical requirements
	Understanding log forwarding profiles and best practices
		Allocating log storage
		Adding disk space to a VM firewall
	Learning about Panorama and log collectors
	Forwarding logs to syslog, SMTP, and other options
		SNMP trap server profile
		Syslog server profile
		Email server profile
		HTTP server profile
		Netflow Profile
		Configuring system log forwarding on the firewall
	Exploring log forwarding profiles
		Dynamic tagging
		Assigning log forwarding actions
	Troubleshooting logs and log forwarding
		Debugging log-receiver
		Reading system resources
		Using tcpdump
		Troubleshooting forwarding to a log collector
	Summary
Chapter 2: Configuring Advanced GlobalProtect Features
	Technical requirements
	Learning about advanced configuration features
		Integrating SAML into authentication methods
		Setting up a VPN connection before the user has logged on
	Leveraging quarantine to isolate agents
	Practical troubleshooting for GlobalProtect issues
	Summary
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
	Technical requirements
	Configuring a site-to-site VPN connection
		Static site-to-site tunnels
		Dynamic site-to-site tunnels
		Setting up the LSVPN
	Summary
Chapter 4: Configuring Prisma Access
	Technical requirements
	Configuring Prisma Access
	Configuring the service infrastructure
	Configuring the service connection
	Configuring directory sync
	Configuring mobile users
	Configuring remote networks
	Configuring the remote firewalls
	Configuring Cortex Data Lake
	Summary
Section 2: Tools, Troubleshooting, and Best Practices
Chapter 5: Enabling Features to Improve Your Security Posture
	Technical requirements
	Hardening the management interface
		FIPS-CC mode
		Replacing the default certificates
		Setting minimum password complexity
		Configuring administrator roles
		Restricting access to the management interface
		Setting the master key
	EDLs
		MineMeld
	Summary
Chapter 6: Anti-Phishing with User Credential Detection
	Technical requirements
	Preparing the firewall for credential detection
		Configuring SSL/TLS decryption
		Enabling IP user mapping
	Using IP user mapping for credential detection
		Enabling group mapping
		Troubleshooting user-ID
	Using group mapping for credential detection
	Using domain credential filter
		Troubleshoot domain credential filter
	Summary
Chapter 7: Practical Troubleshooting and Best Practices Tools
	Technical requirements
	Troubleshooting User-ID
		Users are not being mapped
		Users are mapped briefly
		Inconsistent domain in username
		Command-line interface (CLI) cheat sheet
	Troubleshooting NAT
		Loss of connectivity – proxy-ARP misconfiguration
		Troubleshooting destination NAT issues
		Troubleshooting source NAT
	BPA tool
	Summary
	Why subscribe?
Other Books You May Enjoy
	Packt is searching for authors like you
	Leave a review - let other readers know what you think