دانلود کتاب Securing Remote Access in Palo Alto Networks: Practical techniques to enable and protect remote users, improve your security posture, and troubleshoot next-generation firewalls

فهرست مطالب :

Securing Remote Access in Palo Alto Networks
Contributors
About the author
About the reviewer
Preface
Who this book is for
What this book covers
To get the most out of this book
Code in Action
Download the colour images
Conventions used
Get in touch
Reviews
Section 1: Leveraging the Cloud and Enabling Remote Access
Chapter 1: Centralizing Logs
Technical requirements
Understanding log forwarding profiles and best practices
Allocating log storage
Adding disk space to a VM firewall
Learning about Panorama and log collectors
Forwarding logs to syslog, SMTP, and other options
SNMP trap server profile
Syslog server profile
Email server profile
HTTP server profile
Netflow Profile
Configuring system log forwarding on the firewall
Exploring log forwarding profiles
Dynamic tagging
Assigning log forwarding actions
Troubleshooting logs and log forwarding
Debugging log-receiver
Reading system resources
Using tcpdump
Troubleshooting forwarding to a log collector
Summary
Chapter 2: Configuring Advanced GlobalProtect Features
Technical requirements
Learning about advanced configuration features
Integrating SAML into authentication methods
Setting up a VPN connection before the user has logged on
Leveraging quarantine to isolate agents
Practical troubleshooting for GlobalProtect issues
Summary
Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs
Technical requirements
Configuring a site-to-site VPN connection
Static site-to-site tunnels
Dynamic site-to-site tunnels
Setting up the LSVPN
Summary
Chapter 4: Configuring Prisma Access
Technical requirements
Configuring Prisma Access
Configuring the service infrastructure
Configuring the service connection
Configuring directory sync
Configuring mobile users
Configuring remote networks
Configuring the remote firewalls
Configuring Cortex Data Lake
Summary
Section 2: Tools, Troubleshooting, and Best Practices
Chapter 5: Enabling Features to Improve Your Security Posture
Technical requirements
Hardening the management interface
FIPS-CC mode
Replacing the default certificates
Setting minimum password complexity
Configuring administrator roles
Restricting access to the management interface
Setting the master key
EDLs
MineMeld
Summary
Chapter 6: Anti-Phishing with User Credential Detection
Technical requirements
Preparing the firewall for credential detection
Configuring SSL/TLS decryption
Enabling IP user mapping
Using IP user mapping for credential detection
Enabling group mapping
Troubleshooting user-ID
Using group mapping for credential detection
Using domain credential filter
Troubleshoot domain credential filter
Summary
Chapter 7: Practical Troubleshooting and Best Practices Tools
Technical requirements
Troubleshooting User-ID
Users are not being mapped
Users are mapped briefly
Inconsistent domain in username
Command-line interface (CLI) cheat sheet
Troubleshooting NAT
Loss of connectivity – proxy-ARP misconfiguration
Troubleshooting destination NAT issues
Troubleshooting source NAT
BPA tool
Summary
Why subscribe?
Other Books You May Enjoy
Packt is searching for authors like you
Leave a review - let other readers know what you think