Implementing Palo Alto Networks Prisma Access : Learn Real-World Network Protection

Implementing Palo Alto Networks Prisma Access Learn Real-World Network Protection

Deploy Prisma Access for mobile users, remote networks, and service connections harnessing advanced features Key Features Find out how to activate, deploy, and configure Prisma Access Configure mobile user and remote network security processing nodes Understand user identification and the Cloud Iden...

Descripción completa

Detalles Bibliográficos
Otros Autores: Piens, Tom, author (author), Truyers, Rutger, author
Formato: Libro electrónico
Idioma:Inglés
Publicado: Birmingham, UK : Packt Publishing Ltd [2024]
Edición:First edition
Materias:
Computer networks > Security measures.
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009820531606719
Tabla de Contenidos:
  • Cover
  • Title Page
  • Copyright and Credits
  • Dedication
  • Foreword
  • Contributors
  • Table of Contents
  • Preface
  • Part 1: Activate and Configure Prisma Access
  • Chapter 1: Designing and Planning Prisma Access
  • Technical requirements
  • Routing in Prisma Access
  • Important concepts
  • Cloud infrastructure
  • The relationship between remote networks and service connections
  • The relationship between MU-SPNs and service connections
  • Planning the service infrastructure
  • Planning remote networks
  • Planning mobile user locations
  • Summary
  • Chapter 2: Activating Prisma Access
  • Technical requirements
  • Before you start
  • Panorama-managed Prisma Access
  • Cloud-managed Prisma Access
  • Activating Prisma Access
  • Summary
  • Chapter 3: Setting Up Service Infrastructure
  • Technical requirements
  • Configuring service infrastructure via Strata Cloud Manager
  • Configuring Panorama's managed service infrastructure
  • Settings
  • Service Operations
  • Summary
  • Chapter 4: Deploying Service Connections
  • Technical requirements
  • What are service connections used for?
  • Provisioning an SC-CAN in cloud-managed Prisma Access
  • Primary tunnel
  • Provisioning an SC-CAN in Panorama
  • Summary
  • Part 2: Configure Mobile User and Remote Network Security Processing Nodes
  • Chapter 5: Configuring Remote Network SPNs
  • Technical requirements
  • Deploying RN-SPNs in Strata Cloud Manager
  • Assigning bandwidth to a location
  • Exploring advanced settings
  • Configuring remote network tunnels
  • Deploying RN-SPNs in Panorama
  • Assigning bandwidth to a location
  • Zone mapping
  • Remote Network settings
  • Configuring remote network tunnels
  • Onboarding remote networks
  • Summary
  • Chapter 6: Configuring Mobile User SPNs
  • Technical requirements
  • Design considerations
  • Gateway selection
  • IP pools
  • MU-SPN autoscaling.
  • Configuring MU-SPN in Strata Cloud Manager
  • Infrastructure
  • GlobalProtect app
  • App Settings
  • Tunnel Settings
  • Configuring MU-SPNs in Panorama
  • GlobalProtect portal configuration
  • GlobalProtect gateway configuration
  • Summary
  • Chapter 7: Securing Web Gateway
  • Technical requirements
  • Considerations when using the SWG
  • Configuring the explicit proxy
  • SWG in Prisma Cloud Manager
  • SWG in Panorama
  • Proxy Auto Configuration (PAC) file and client configuration
  • GlobalProtect in the proxy mode
  • Summary
  • Chapter 8: Setting Up Your Security Policy
  • Technical requirements
  • Why do we need security rules?
  • Building security policies in Strata Cloud Manager
  • Security rules
  • Custom security profiles
  • Decryption
  • Objects
  • Building security policies in Panorama
  • Clientless VPN
  • Summary
  • Part 3: Advanced Configuration and Best Practices
  • Chapter 9: User Identification and Cloud Identity Engine
  • Technical requirements
  • User identification and group mapping
  • Cloud Identity Engine
  • Setting up a directory sync in Azure
  • Setting up a SCIM connector
  • Adding CIE to Prisma Access
  • User ID redistribution
  • User ID collector in Strata Cloud Manager
  • User ID collector in Panorama
  • User ID agents on firewalls
  • Summary
  • Chapter 10: Advanced Configurations and Insights
  • Licensing
  • Cortex Data Lake
  • Insights and ADEM
  • Summary
  • Chapter 11: ZTNA Connector
  • Differences between the ZTNA connector and SC-CAN
  • Preparing to deploy the ZTNA connector
  • Setting up the ZTNA connector
  • Setting up the connector VM
  • Basic troubleshooting
  • Summary
  • Index
  • Other Books You May Enjoy.

Ejemplares similares