NGFW-Engineer

• Basic knowledge of networking concepts such as IP addressing, routing, and VPNs

• Understanding of security principles including firewall policies, traffic analysis, and threat prevention

• Familiarity with automation tools like APIs, Terraform, or Ansible is beneficial

• Recommended background: experience in networking or security and completion of entry-level certifications such as Palo Alto Networks Certified Cybersecurity Apprentice or Network Security Generalist

Candidates can  achieve the certification by passing the following exam(s).

• EDU-210 Palo Alto Networks Certified Next-Generation Firewall Engineer (NGFW-Engineer) Certification Exam 

The certification exam fee is not included in the course fee.

• Configure and deploy Palo Alto Networks NGFWs (hardware and virtual). 

• Set up and manage security policies to control network traffic. 

• Implement VPNs including IPsec and GRE tunnels. 

• Configure routing (static, OSPF, BGP) and interface types (L2, L3, VWire). 

• Integrate the firewall with authentication servers and identity-based policies. 

• Perform log analysis and manage reporting tools. 

• Troubleshoot issues using CLI and GUI tools. 

• Use Panorama for centralized firewall management. 

• Automate firewall deployment with APIs, Terraform, and Ansible. 

• Enable security features like App-ID, URL filtering, WildFire, and Threat Prevention. 

• Network Engineers 

• Security Engineers 

• Firewall Engineers 

• Firewall Administrators 

• Network Security Support Engineers 

• Professional Services Consultants 

• IT professionals managing PAN-OS configuration and policies 

• Firewall Fundamentals

  • Initial setup and licensing

  • Interfaces, zones, and virtual routers

• Security & NAT Policies

  • Creating and managing security rules

  • Configuring and troubleshooting NAT

• User & Device Identification

  • User-ID configuration

  • Authentication with LDAP, RADIUS, and SAML

• Application & Threat Prevention

  • App-ID and Content-ID features

  • URL filtering, antivirus, and WildFire integration

• VPN Implementation

  • IPsec site-to-site VPN

  • Remote access VPN with GlobalProtect

  • GRE tunnel basics

• Traffic Analysis & Monitoring

  • Log management and system monitoring

  • Dashboards and report generation

• Panorama Management

  • Centralised management with Panorama

  • Templates and device groups

• Automation & Integration

  • APIs and automation tools such as Terraform and Ansible

  • Integration with cloud platforms and third-party tools

• High Availability & Troubleshooting

  • Configuring high availability pairs

  • Troubleshooting with CLI and GUI tools

• PCCET: Palo Alto Networks Certified Cybersecurity Entry‑level Technician
• PCDRA: Palo Alto Networks Certified Detection and Remediation Analyst
• PCNSA: Palo Alto Networks Certified Network Security Administrator
• PCCSE: Prisma Certified Cloud Security Engineer
• PCNSE: Palo Alto Networks Certified Network Security Engineer
• PCSAE: Palo Alto Networks Certified Security Automation Engineer