Palo Alto CLI okay

> debug sslmgr statistics




show config running

set cli config-output-format set

===========
configure
[edit]
 student53 #


#load config from ?
# load config from PAN-EDU-311.xml
shows various config available to load

=================
set shared server-profile radius PAN-Radius server DC1 secret pan123
commit

# exit
>



=============
show
test
set
debug


find command keyword fpga
find command keyword radius

find command keyword snmp



=======show session ? =======
show session all
show session info

=======show system disk-space

show system disk quotas


===show counter global
show counter global filter
show country global filter delta yes



==== show counter interface




show session id 1867



=====show running resource-monitor

show running security-policy

show running nat-policy

show running rule-use type used rule-base security vsys vsysl
show running rule-use type unused rule-base security vsys vsysl

show system resources
show system resoruc

show session meter
show session rematch


======show system software status


====show system services










candidate config
tftp import configuration from 10.30.11.153 file PAN-EDU-311-config0-53.xml

Palo Alto Decryption

Internal Users ------> Request SSL Connection ---------> External Server

Server sends its certificate to FW ----> (FW decrypts the request )generate certificate internally and send request to internal user




Inbound SSL Inspection

Palo Alto - File Blocking with Wildfire

Palo Alto - Antivirus Profile

Objects-->Security Profiles -->AntiVirus

below we name the new antivirus profile , than we check "Pack Capture" , Each of the service we set to alert

Palo Alto - URL Filtering Profile

we are creating a URL Filtering Profile for Students . student-url-filtering

Palo Alto - Adding Custom URL Category

Objects --> Customer Objects --> URL Category

Click "Add"  to Create a custom URL Category

palo

Accredired confiration

CNSE  network security engineer (CNSE)