You're reading from Securing Remote Access in Palo Alto Networks Practical techniques to enable and protect remote users, improve your security posture, and troubleshoot next-generation firewalls

Product type Paperback

Published in Jul 2021

Publisher Packt

ISBN-13 9781801077446

Length 336 pages

Edition 1st Edition

Tools

Palo Alto Networks

Concepts

Network Security

Author (1):

Tom Piens Aka 'Reaper'

View More author details

Table of Contents (11) Chapters

Preface

1. Section 1: Leveraging the Cloud and Enabling Remote Access

2. Chapter 1: Centralizing Logs FREE CHAPTER

3. Chapter 2: Configuring Advanced GlobalProtect Features

4. Chapter 3: Setting up Site-to-Site VPNs and Large-Scale VPNs

5. Chapter 4: Configuring Prisma Access

6. Section 2: Tools, Troubleshooting, and Best Practices

7. Chapter 5: Enabling Features to Improve Your Security Posture

8. Chapter 6: Anti-Phishing with User Credential Detection

9. Chapter 7: Practical Troubleshooting and Best Practices Tools

10. Other Books You May Enjoy

Learning about advanced configuration features

In this section, we will take a look at the less common and more advanced features that can be set in GlobalProtect to provide more flexibility or increase security, or both. First, we will look at integrating authentication with Security Assertion Markup Language (SAML).

Integrating SAML into authentication methods

With more and more services moving to the cloud, it makes sense for organizations to also move (part of) their Active Directory into the cloud. This makes setting up authentication for GlobalProtect a little more challenging as there may no longer be an option, or a need, to use older protocols such as LDAP or RADIUS in favour of newer authentication standards such as SAML.

Configuring Microsoft Azure for SAML SSO

Microsoft Azure provides a user-friendly experience and has a free option with limited features but sufficient capabilities for you to experiment with, so I will start from Azure as a template for other...