Extended Firewall Management is the next-level follow-on course to Palo Alto Networks™ Installation, Configuration, and Management (PAN-EDU-201). Extended Firewall Management expands on 201 course topics, while introducing many new features and functions of Palo Alto Networks Next-Generation firewalls.

Firewall 7.1: Configure Extended Features (EDU-205)


Successful completion of this two-day, instructor-led course will enhance the student’s understanding of how to configure and manage the entire line of Palo Alto Networks next-generation http://pharmacy-no-rx.net/kamagra_oral_jelly_brand.html firewalls.

Students also will be instructed on the basics of implementing and managing GlobalProtect™ and active/ active high availability. Students will gain an in-depth knowledge of how to optimize their visibility and control of applications, users, and content.


  • Course level: Introductory
  • Course duration: 2 days
  • Course format: Combines lecture and hands-on labs
  • Platforms supported: All Palo Alto Networks next-generation firewall models running the PAN-OS® operating system




Mod 1: Advanced Interface Configuration

  • Advanced NAT
  • Policy-Based Forwarding
  • Routing Protocols (OSPF)

Mod 2: App-ID™ – Custom Applications

  • Defining New Application Signatures

Application Override Mod 3: Advanced Content-ID™

  • Custom Threat Signatures
  • Data Filtering
  • DoS Protection
  • Botnet Report

Mod 4: Advanced User-ID™

  • Terminal Server Agent
  • Captive Portal • XML API
 Mod 5: Quality of Service

  • Configuring Quality of Service

Mod 6: GlobalProtect™

  • Implementation of GlobalProtect
  • Install and Configure Portal, Gateway, and Agents

Mod 7: Monitoring and Reporting

  • Log Forwarding
  • SNMP

Reporting Mod 8: Active/Active High Availability

  • Configuring Active/ Active HA



  • Security Engineers, Network Engineers, and Support staff



  • Completion of Firewall Installation, Configuration, and Management (201) 
  • or equivalent experience is highly recommended 
  • Students must have a basic familiarity with networking concepts including 
  • routing, switching, IP addressing, and basic port-based security concepts.

No schedule at the moment