Configure NAT and VPNs Using Palo Alto Firewalls
A robust enterprise requires NAT and VPNs for their infrastructure to remain secure. This course will teach you how to understand and configure source and destination NAT solutions, as well as various site-to-site and remote access VPN solutions.
What you'll learn
NAT is important to allow users to access the internet, and hide back-end devices. VPNs are used to protect traffic, whether that is from one site to another, or remote users trying to access enterprise resources. In this course, Configure NAT and VPNs Using Palo Alto Firewalls, you’ll learn how to configure NAT and various VPNs on a Palo Alto Firewall. First, you’ll explore the different types of source and destination NAT translations, and how to configure them. Next, you’ll discover how to configure site-to-site VPNs, including one-to-one and one-to many-VPNs. Finally, you’ll learn how to configure a Palo Alto Firewall solution to support remote access users. When you’re finished with this course, you’ll have the skills and knowledge of a Palo Alto Firewall needed to protect networks with robust NAT and VPNs solutions.
Table of contents
- Course Overview and Objectives 9m
- NAT Overview and Flow Logic 7m
- Source NAT Types and Static Source NAT 2m
- Demo: Configuring Source Static NAT 8m
- Demo: Verifying Static Source NAT 7m
- Source Dynamic NAT and DIPP 5m
- Demo: Configuring Dynamic NAT and DIPP 9m
- Demo: Verifying Source Dynamic NAT and DIPP 4m
- Module Objective and Flow Logic Review 2m
- Destination NAT Overview 5m
- Demo: Configuring Static Destination NAT 11m
- Demo: Verifying Static Destination NAT with the Firewalls Packet Capture 8m
- No-NAT Rules 2m
- Demo: Configuring and Verifying a No-NAT Rule 6m
- U-turn NAT Rule 1m
- Demo: Configuring and Verifying a U-turn NAT Rule 10m
- Bi-directional NAT 4m
- Demo: Troubleshooting NAT 10m
- Module Objectives and IPSec Overview 5m
- Components to Configure an IPSec Site-to-site VPN 4m
- Demo: Configuring an IPSec Site-to-site VPN with Another Palo Alto Firewall 13m
- Demo: Configuring Routing and Security Rules for a Site-to-site VPN 11m
- Demo: Verifying a Site-to-site Tunnel 7m
- Demo: Using Certificates in a Site-to-site VPN 6m
- Demo: Troubleshooting Site-to-site VPNs 13m
- Module Objectives and Policy-based vs. Route-based VPNs 7m
- Demo: Configuring Policy-based VPN with an ASA 7m
- Demo: Configuring and Verifying NAT Rules, Security Rules, and Routing for a Site-to-site VPN 8m
- Demo: Troubleshooting Proxy ID Site-to-site VPNs 8m
- GRE Tunnels 2m
- Demo: Configuring a GRE Tunnel with Vendor 3 5m
- Demo: Troubleshooting and Verifying GRE Tunnels 9m
- Module Objective and GlobalProtect Large Scale VPN Overview and Components 6m
- Large Scale VPN Certificate Infrastructure 2m
- Demo: Creating Certificates for Large Scale VPN 13m
- Large Scale VPN Gateways 2m
- Demo: Configuring the GlobalProtect LSVPN Gateway 8m
- Large Scale VPN Portals 2m
- Demo: Configuring GlobalProtect LSVPN Portal 7m
- Large Scale VPN Satellite Firewalls 2m
- Demo: Configuring LSVPN Satellite Firewalls 10m
- Demo: Troubleshooting and Verifying Globomantics LSVPN Solution 12m
- Module Objective and Remote Access VPN Components 4m
- GlobalProtect Agent and Host Information Profiles 4m
- Demo: Configuring Host Information Profile Objects 5m
- Demo: Prerequisites for GlobalProtect Remote Access VPNs 2m
- Demo: Configuring Remote Access VPN Components and Security Rules 7m
- Demo: Configuring GlobalProtect Remote Access Gateway 9m
- Demo: Configuring GlobalProtect Remote Access Portal 8m
- Demo: Installing the GlobalProtect Client and Verifying Connectivity 10m
- Demo: Troubleshoot GlobalProtect Remote Access VPNs 5m
- Clientless VPNs Overview 2m
- Course Summary 5m
About the author
Craig has over 10 years of IT experience, including working on Palo Alto Firewalls, Cisco Routes and Switches, Microsoft Servers, and VMWare ESXi. Craig started in IT in the United States Marine Corps and began teaching his Marines all the design and implementation concepts that they needed to know. He loves when his students have the "lightbulb moment" and are able to understand the concepts he is teaching them. Aside from teaching, Craig also owns a business that consults with enterprises to h... more