Page 1 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Palo Alto Networks
Firewall 10.0 Essentials:
Configuration and Management
Lab Guide
PAN-OS® 10.0
EDU-210
Courseware Version A
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
,Page 2 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Palo Alto Networks, Inc.
https://www.paloaltonetworks.com
© 2017-2020, Palo Alto Networks, Inc.
Palo Alto Networks, PAN-OS, WildFire, RedLock, and Demisto are registered trademarks of
Palo Alto Networks, Inc. All other marks mentioned herein may be trademarks of their
respective companies.
© 2017-2020 Palo Alto Networks, Inc. Page 2
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
,Page 3 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Table of Contents
Table of Contents ............................................................................................................................ 3
Typographical Conventions........................................................................................................... 12
How to Use This Lab Guide .......................................................................................................... 13
Lab 1: Security Operating Platform and Architecture ................................................................... 14
Lab 2 Scenario: Connect to the Management Network................................................................. 15
Lab Objectives ........................................................................................................................... 15
Connect to Your Student Firewall ............................................................................................. 15
Apply a Baseline Configuration to the Firewall ........................................................................ 16
Configure the Update Server and DNS Server .......................................................................... 18
Configure a General Settings ..................................................................................................... 19
Modify Management Interface .................................................................................................. 20
Check for New PAN-OS Software ............................................................................................ 21
Lab 3 Scenario: Working with Firewall Configurations and Log Files ........................................ 23
Lab Objectives ........................................................................................................................... 23
Apply a Baseline Configuration to the Firewall ........................................................................ 23
Save a Named Configuration Snapshot ..................................................................................... 24
Export a Named Configuration Snapshot .................................................................................. 25
Revert Ongoing Configuration Changes .................................................................................... 26
Preview Configuration Changes ................................................................................................ 29
Examine Log Files ..................................................................................................................... 31
Create a Log File Filter .............................................................................................................. 32
Use the Filter Builder ................................................................................................................. 35
Lab 4 Scenario: Working with Firewall Administrator Accounts................................................. 39
Lab Objectives ........................................................................................................................... 39
Apply a Baseline Configuration to the Firewall ........................................................................ 40
Create a Local Database Authentication Profile ........................................................................ 40
Create a Local User Database Account ..................................................................................... 41
Create an Administrator Account .............................................................................................. 42
Configure LDAP Authentication ............................................................................................... 43
© 2017-2020 Palo Alto Networks, Inc. Page 3
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
, Page 4 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Configure RADIUS Authentication ........................................................................................... 48
Configure an Authentication Sequence ..................................................................................... 51
Lab 5 Scenario: Connecting the Firewall to Production Networks ............................................... 54
Lab Objectives ........................................................................................................................... 55
Apply a Baseline Configuration to the Firewall ........................................................................ 55
Create Layer 3 Network Interfaces ............................................................................................ 55
Create a Layer 3 Interface on ethernet1/1 .................................................................................. 56
Create a Layer 3 Interface on ethernet1/2 .................................................................................. 58
Create a Layer 3 Interface on ethernet1/3 .................................................................................. 59
Create a Virtual Router .............................................................................................................. 62
Segment Your Production Network Using Security Zones ....................................................... 64
Commit the Configuration ......................................................................................................... 68
Test Connectivity to Each Zone ................................................................................................. 69
Create Interface Management Profiles....................................................................................... 71
Test Interface Access before Management Profiles................................................................... 72
Define Interface Management Profiles ...................................................................................... 73
Apply Allow-ping to ethernet1/1 ............................................................................................... 75
Apply Allow-mgt to ethernet1/2 ................................................................................................ 76
Apply Allow-mgt to ethernet1/3 ................................................................................................ 77
Commit the Configuration ......................................................................................................... 78
Test Interface Access after Management Profiles ..................................................................... 78
Lab 6: Cyberattack Lifecycle ........................................................................................................ 80
Lab 7 Scenario: Configuring Security Policy Rules and NAT Policy Rules ................................ 81
Lab Objectives ........................................................................................................................... 82
Apply a Baseline Configuration to the Firewall ........................................................................ 82
Create Security Policy Rule ....................................................................................................... 82
Commit the Configuration ......................................................................................................... 86
Modify Security Policy Table Columns .................................................................................... 87
Test New Security Policy Rule .................................................................................................. 89
Examine Rule Hit Count ............................................................................................................ 90
Reset the Rule Hit Counter ........................................................................................................ 91
© 2017-2020 Palo Alto Networks, Inc. Page 4
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Palo Alto Networks
Firewall 10.0 Essentials:
Configuration and Management
Lab Guide
PAN-OS® 10.0
EDU-210
Courseware Version A
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
,Page 2 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Palo Alto Networks, Inc.
https://www.paloaltonetworks.com
© 2017-2020, Palo Alto Networks, Inc.
Palo Alto Networks, PAN-OS, WildFire, RedLock, and Demisto are registered trademarks of
Palo Alto Networks, Inc. All other marks mentioned herein may be trademarks of their
respective companies.
© 2017-2020 Palo Alto Networks, Inc. Page 2
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
,Page 3 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Table of Contents
Table of Contents ............................................................................................................................ 3
Typographical Conventions........................................................................................................... 12
How to Use This Lab Guide .......................................................................................................... 13
Lab 1: Security Operating Platform and Architecture ................................................................... 14
Lab 2 Scenario: Connect to the Management Network................................................................. 15
Lab Objectives ........................................................................................................................... 15
Connect to Your Student Firewall ............................................................................................. 15
Apply a Baseline Configuration to the Firewall ........................................................................ 16
Configure the Update Server and DNS Server .......................................................................... 18
Configure a General Settings ..................................................................................................... 19
Modify Management Interface .................................................................................................. 20
Check for New PAN-OS Software ............................................................................................ 21
Lab 3 Scenario: Working with Firewall Configurations and Log Files ........................................ 23
Lab Objectives ........................................................................................................................... 23
Apply a Baseline Configuration to the Firewall ........................................................................ 23
Save a Named Configuration Snapshot ..................................................................................... 24
Export a Named Configuration Snapshot .................................................................................. 25
Revert Ongoing Configuration Changes .................................................................................... 26
Preview Configuration Changes ................................................................................................ 29
Examine Log Files ..................................................................................................................... 31
Create a Log File Filter .............................................................................................................. 32
Use the Filter Builder ................................................................................................................. 35
Lab 4 Scenario: Working with Firewall Administrator Accounts................................................. 39
Lab Objectives ........................................................................................................................... 39
Apply a Baseline Configuration to the Firewall ........................................................................ 40
Create a Local Database Authentication Profile ........................................................................ 40
Create a Local User Database Account ..................................................................................... 41
Create an Administrator Account .............................................................................................. 42
Configure LDAP Authentication ............................................................................................... 43
© 2017-2020 Palo Alto Networks, Inc. Page 3
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
, Page 4 EDU-210 Lab Guide – Final
EDU-210
VersionLab
Complete
Guide –
Course
FinalLab
Version
Instructions
Complete
& Study
Course
Resource
Lab Instructions & Study Resource.pdf
Configure RADIUS Authentication ........................................................................................... 48
Configure an Authentication Sequence ..................................................................................... 51
Lab 5 Scenario: Connecting the Firewall to Production Networks ............................................... 54
Lab Objectives ........................................................................................................................... 55
Apply a Baseline Configuration to the Firewall ........................................................................ 55
Create Layer 3 Network Interfaces ............................................................................................ 55
Create a Layer 3 Interface on ethernet1/1 .................................................................................. 56
Create a Layer 3 Interface on ethernet1/2 .................................................................................. 58
Create a Layer 3 Interface on ethernet1/3 .................................................................................. 59
Create a Virtual Router .............................................................................................................. 62
Segment Your Production Network Using Security Zones ....................................................... 64
Commit the Configuration ......................................................................................................... 68
Test Connectivity to Each Zone ................................................................................................. 69
Create Interface Management Profiles....................................................................................... 71
Test Interface Access before Management Profiles................................................................... 72
Define Interface Management Profiles ...................................................................................... 73
Apply Allow-ping to ethernet1/1 ............................................................................................... 75
Apply Allow-mgt to ethernet1/2 ................................................................................................ 76
Apply Allow-mgt to ethernet1/3 ................................................................................................ 77
Commit the Configuration ......................................................................................................... 78
Test Interface Access after Management Profiles ..................................................................... 78
Lab 6: Cyberattack Lifecycle ........................................................................................................ 80
Lab 7 Scenario: Configuring Security Policy Rules and NAT Policy Rules ................................ 81
Lab Objectives ........................................................................................................................... 82
Apply a Baseline Configuration to the Firewall ........................................................................ 82
Create Security Policy Rule ....................................................................................................... 82
Commit the Configuration ......................................................................................................... 86
Modify Security Policy Table Columns .................................................................................... 87
Test New Security Policy Rule .................................................................................................. 89
Examine Rule Hit Count ............................................................................................................ 90
Reset the Rule Hit Counter ........................................................................................................ 91
© 2017-2020 Palo Alto Networks, Inc. Page 4
-2026 EDU-210 Lab Guide – Final Version
EDU-210Complete
Lab Guide
Course
– Final
Lab Version
Instructions
Complete
& StudyCourse
Resource
Lab Instructions & Study Resource
