{"id":1314,"date":"2021-02-22T09:00:00","date_gmt":"2021-02-22T15:00:00","guid":{"rendered":"https:\/\/packitforwarding.com\/?p=1314"},"modified":"2021-02-12T07:11:47","modified_gmt":"2021-02-12T13:11:47","slug":"pcnsa-2-1","status":"publish","type":"post","link":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/","title":{"rendered":"PCNSA 2.1"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Identify and configure firewall management interfaces.<\/p><cite>Palo Alto PCNSA Study Guide v10<\/cite><\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">Management Access<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Web Interface<\/li><li>CLI<\/li><li>Panorama<\/li><li>XML API<\/li><\/ul>\n\n\n\n<p>All Palo Alto firewalls have a dedicated MGT (management) port on the control plane. This separates the control plane and data plane to safeguard management and to enhance performance.<\/p>\n\n\n\n<p>Initial setup must be done using either the MGT port or serial port. <\/p>\n\n\n\n<p>Some tasks including licensing and updates require the MGT port to have Internet access, or a service route must be configured to the data plane.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Initial Setup<\/h3>\n\n\n\n<ol class=\"wp-block-list\"><li>Gather the required information for setup. (IP, Netmask, Default Gateway, DNS Server)<\/li><li>Connect an Ethernet cable from a computer directly to the firewall MGT port.<\/li><li>Configure the computer with an IP address in the 192.168.1.0\/24 subnet other than 192.168.1.1.<\/li><li>Navigate to https:\/\/192.168.1.1<\/li><li>Login with the default username of admin and a password of admin. You will be prompted to change this the first time you login.<\/li><\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Four Management Methods<\/h3>\n\n\n\n<p><strong>Web Management:<\/strong> The web interface provides configuration and monitoring capabilities. HTTPS is the default method, but insecure HTTP is available, but not recommended.<\/p>\n\n\n\n<p><strong>CLI:<\/strong> The CLI allows for text based configuration and monitoring over Serial, SSH or Telnet. The CLI also offers debugging information. The accounts used for CLI must have CLI enabled.<\/p>\n\n\n\n<p>At first the CLI is in operational mode. This allows for tools like ping, traceroute and show commands. To change the configuration, enter configuration mode by typing configure.<\/p>\n\n\n\n<p><strong>Panorama:<\/strong> Panorama is a Palo Alto Networks centralized management platform. It provides web management of multiple firewalls. Panorama is recommended to help keep consistent policies, especially when you have more than 6 firewalls to manage.<\/p>\n\n\n\n<p><strong>XML API:<\/strong> Provides a REST interface for configuration and monitoring of a firewall. This interface can be used for automation tasks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Interface Management Profiles<\/h3>\n\n\n\n<p>Data plane interfaces can be used as management interfaces. You configure this by using an interface management profile. The profile defines which services (HTTPS, SSH, Ping, Telnet, HTTP, SNMP, Response Pages, and User-ID) are able to be used via the interface that it is attached to. In addition an ACL of allowed management IPs can be applied to this profile. If none is defined, ALL IPs are allowed. If no profile is attached, all management traffic is denied on that port.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Firewall Web Interface<\/h3>\n\n\n\n<p>The default view is a dashboard that provides a condensed set of information. The dashboard is customizable with multiple widgets.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Application widgets<ul><li>ACC Risk Factor<\/li><li>Top Applications<\/li><li>Top High Risk Applications<\/li><\/ul><\/li><li>Logs widgets<ul><li>Config logs<\/li><li>Data Filtering logs<\/li><li>System logs<\/li><li>Threat logs<\/li><li>URL Filtering logs<\/li><\/ul><\/li><li>System widgets<ul><li>General info<\/li><li>HA<\/li><li>Interfaces<\/li><li>Locks<\/li><li>Logged in Admins<\/li><li>System Resources<\/li><\/ul><\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Functional Tabs<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>Dashboard: Functional information about the firewall<\/li><li>ACC: Graphically depicts firewall trends<\/li><li>Monitor: Log visibility and packet captures<\/li><li>Policies: Security and NAT policies<\/li><li>Objects: Creation of network, host and other objects<\/li><li>Network: Configuration of zones, interfaces and other network parts<\/li><li>Device: Allow system configuration like hostname, and certificates. Configuration backup<\/li><\/ul>\n\n\n\n<p><strong>Task Icon:<\/strong> appears in the bottom right, displaces tasks since the last firewall reboot including automated and manual tasks like commits<\/p>\n\n\n\n<p><strong>Service Routes:<\/strong> For communication to update servers, DNS, Email and other management external services, routes can be added to allow non-MGT ports to be used. This is done under Device&gt;Setup&gt;Services&gt;Service Route Configuration&gt;Customize<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Firewall Services<\/h2>\n\n\n\n<p>Three services are important for firewall operation and DNS MUST be setup during the initial configuration.<\/p>\n\n\n\n<p><strong>DNS:<\/strong> Domain Name System (DNS) is used by the firewall to resolve hostnames. At least one DNS server must be configured. It is configured under Device&gt;Setup&gt;Services&gt;Services_gear_icon, then click servers and add the primary and secondary DNS server addresses, click ok and then commit.<\/p>\n\n\n\n<p><strong>DHCP:<\/strong> Allows configuration of the IP address for the MGT port via DHCP, not required<\/p>\n\n\n\n<p><strong>NTP: <\/strong> NTP is recommended (or required depending on the documentation) and is configured under Device&gt;Setup&gt;Services&gt;services_gear_icon. NTP keeps the firewall&#8217;s clock in sync.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Identify and configure firewall management interfaces. Palo Alto PCNSA Study Guide v10 Management Access Web Interface CLI Panorama XML API All Palo Alto firewalls have a dedicated MGT (management) port on the control plane. This separates the control plane and data plane to safeguard management and to enhance performance. Initial setup must be done using [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":201,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"PCNSA 2.1 - Study Notes #paloalto #pcnsa","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[88,31,189,188],"tags":[90,191,190],"class_list":["post-1314","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-certification","category-palo-alto","category-pcnsa","tag-certification","tag-palo-alto","tag-pcnsa"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PCNSA 2.1 -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PCNSA 2.1 -\" \/>\n<meta property=\"og:description\" content=\"Identify and configure firewall management interfaces. Palo Alto PCNSA Study Guide v10 Management Access Web Interface CLI Panorama XML API All Palo Alto firewalls have a dedicated MGT (management) port on the control plane. This separates the control plane and data plane to safeguard management and to enhance performance. Initial setup must be done using [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/packitforwarding\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/packitforwarding\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-22T15:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"426\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Story\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/www.twitter.com\/ntwrk80\" \/>\n<meta name=\"twitter:site\" content=\"@ntwrk80\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Story\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/\"},\"author\":{\"name\":\"Ben Story\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#\\\/schema\\\/person\\\/441c2562293c45fbcf483f246430e6c8\"},\"headline\":\"PCNSA 2.1\",\"datePublished\":\"2021-02-22T15:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/\"},\"wordCount\":663,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#\\\/schema\\\/person\\\/441c2562293c45fbcf483f246430e6c8\"},\"image\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1\",\"keywords\":[\"certification\",\"Palo Alto\",\"PCNSA\"],\"articleSection\":[\"Blog\",\"Certification\",\"Palo Alto\",\"PCNSA\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/\",\"url\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/\",\"name\":\"PCNSA 2.1 -\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1\",\"datePublished\":\"2021-02-22T15:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2018\\\/09\\\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1\",\"width\":640,\"height\":426},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/index.php\\\/2021\\\/02\\\/22\\\/pcnsa-2-1\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/packitforwarding.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PCNSA 2.1\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#website\",\"url\":\"https:\\\/\\\/packitforwarding.com\\\/\",\"name\":\"\",\"description\":\"Paying it forward to the next generation of IT.\",\"publisher\":{\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#\\\/schema\\\/person\\\/441c2562293c45fbcf483f246430e6c8\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/packitforwarding.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/packitforwarding.com\\\/#\\\/schema\\\/person\\\/441c2562293c45fbcf483f246430e6c8\",\"name\":\"Ben Story\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1\",\"width\":489,\"height\":250,\"caption\":\"Ben Story\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/packitforwarding.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1\"},\"description\":\"In the course of my career, I have had the pleasure of working in multiple verticals including Education, Logistics and Healthcare. Although I started as a systems administrator (aka server jockey), I am now firmly in the network engineering arena. Currently I am working for a multi-state hospital system.\",\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/packitforwarding\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/benstory\",\"https:\\\/\\\/x.com\\\/https:\\\/\\\/www.twitter.com\\\/ntwrk80\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PCNSA 2.1 -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/","og_locale":"en_US","og_type":"article","og_title":"PCNSA 2.1 -","og_description":"Identify and configure firewall management interfaces. Palo Alto PCNSA Study Guide v10 Management Access Web Interface CLI Panorama XML API All Palo Alto firewalls have a dedicated MGT (management) port on the control plane. This separates the control plane and data plane to safeguard management and to enhance performance. Initial setup must be done using [&hellip;]","og_url":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/","article_publisher":"https:\/\/www.facebook.com\/packitforwarding","article_author":"https:\/\/www.facebook.com\/packitforwarding","article_published_time":"2021-02-22T15:00:00+00:00","og_image":[{"width":640,"height":426,"url":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","type":"image\/jpeg"}],"author":"Ben Story","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/www.twitter.com\/ntwrk80","twitter_site":"@ntwrk80","twitter_misc":{"Written by":"Ben Story","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#article","isPartOf":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/"},"author":{"name":"Ben Story","@id":"https:\/\/packitforwarding.com\/#\/schema\/person\/441c2562293c45fbcf483f246430e6c8"},"headline":"PCNSA 2.1","datePublished":"2021-02-22T15:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/"},"wordCount":663,"commentCount":0,"publisher":{"@id":"https:\/\/packitforwarding.com\/#\/schema\/person\/441c2562293c45fbcf483f246430e6c8"},"image":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","keywords":["certification","Palo Alto","PCNSA"],"articleSection":["Blog","Certification","Palo Alto","PCNSA"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/","url":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/","name":"PCNSA 2.1 -","isPartOf":{"@id":"https:\/\/packitforwarding.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#primaryimage"},"image":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","datePublished":"2021-02-22T15:00:00+00:00","breadcrumb":{"@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#primaryimage","url":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","contentUrl":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","width":640,"height":426},{"@type":"BreadcrumbList","@id":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/22\/pcnsa-2-1\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/packitforwarding.com\/"},{"@type":"ListItem","position":2,"name":"PCNSA 2.1"}]},{"@type":"WebSite","@id":"https:\/\/packitforwarding.com\/#website","url":"https:\/\/packitforwarding.com\/","name":"","description":"Paying it forward to the next generation of IT.","publisher":{"@id":"https:\/\/packitforwarding.com\/#\/schema\/person\/441c2562293c45fbcf483f246430e6c8"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/packitforwarding.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/packitforwarding.com\/#\/schema\/person\/441c2562293c45fbcf483f246430e6c8","name":"Ben Story","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2026\/02\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1","url":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2026\/02\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1","contentUrl":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2026\/02\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1","width":489,"height":250,"caption":"Ben Story"},"logo":{"@id":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2026\/02\/cropped-PIF_Logo-Color-Horizontal-Rounded-1.png?fit=489%2C250&ssl=1"},"description":"In the course of my career, I have had the pleasure of working in multiple verticals including Education, Logistics and Healthcare. Although I started as a systems administrator (aka server jockey), I am now firmly in the network engineering arena. Currently I am working for a multi-state hospital system.","sameAs":["https:\/\/www.facebook.com\/packitforwarding","https:\/\/www.linkedin.com\/in\/benstory","https:\/\/x.com\/https:\/\/www.twitter.com\/ntwrk80"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/09\/pexels-photo-373543.jpeg?fit=640%2C426&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pay9MD-lc","jetpack-related-posts":[{"id":1332,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/03\/26\/pcnsa-2-6\/","url_meta":{"origin":1314,"position":0},"title":"PCNSA &#8211; 2.6","author":"Ben Story","date":"March 26, 2021","format":false,"excerpt":"Identify and configure firewall interfaces.Palo Alto Networks PCNSA Study Guide v10 Special Interfaces Decrypt Mirror: Allows traffic that has been decrypted to be sent to other tools for analysis. This is not available on VM-Series firewalls.Log card: On the PA-7000 series firewalls a log card data is used for forwarding\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/packitforwarding.com\/index.php\/category\/blog\/"},"img":{"alt_text":"close up photo of gray metal pipes","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1381938.jpeg?fit=1200%2C798&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1381938.jpeg?fit=1200%2C798&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1381938.jpeg?fit=1200%2C798&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1381938.jpeg?fit=1200%2C798&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1381938.jpeg?fit=1200%2C798&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1300,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/12\/pcnsa-1-2\/","url_meta":{"origin":1314,"position":1},"title":"PCNSA &#8211; 1.2","author":"Ben Story","date":"February 12, 2021","format":false,"excerpt":"Identify the components and operation of Single-Pass ParallelProcessing architecture.Palo Alto PCNSA Study Guide v10 Single-Pass Parallel Processing The Palo Alto firewalls use a single-pass parallel processing architecture. It combines single-pass software with parallel processing hardware. The goal is to \"scan it all, scan it once.\" The software uses stream processing.\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/packitforwarding.com\/index.php\/category\/blog\/"},"img":{"alt_text":"Security","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504.jpeg?fit=1200%2C800&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504.jpeg?fit=1200%2C800&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504.jpeg?fit=1200%2C800&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1319,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/03\/01\/pcnsa-2-2\/","url_meta":{"origin":1314,"position":2},"title":"PCNSA 2.2","author":"Ben Story","date":"March 1, 2021","format":false,"excerpt":"Identify how to manage firewall configurations.Palo Alto Networks PCNSA Study Guide v10 Manage Configurations Using Candidate and Running Configurations Candidate Configurations: All changes to a firewall are made to a candidate configuration. This resides in memory on the control plane. A commit activates this configuration into the running configuration on\u2026","rel":"","context":"In &quot;Certification&quot;","block_context":{"text":"Certification","link":"https:\/\/packitforwarding.com\/index.php\/category\/certification\/"},"img":{"alt_text":"gray metal cubes decorative","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1005644.jpeg?fit=900%2C1200&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1005644.jpeg?fit=900%2C1200&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1005644.jpeg?fit=900%2C1200&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/03\/pexels-photo-1005644.jpeg?fit=900%2C1200&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":1322,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/03\/05\/pcnsa-2-3\/","url_meta":{"origin":1314,"position":3},"title":"PCNSA 2.3","author":"Ben Story","date":"March 5, 2021","format":false,"excerpt":"Identify and schedule dynamic updates.Palo Alto Networks PCNSA Study Guide v10 Dynamic Updates Antivirus Includes signatures as well as WildFire signatures and C2 signatures. WildFire signatures are based on malware first seen by other firewalls around the world. New antivirus signatures are published daily and require a Threat Prevention subscription.\u2026","rel":"","context":"In &quot;Certification&quot;","block_context":{"text":"Certification","link":"https:\/\/packitforwarding.com\/index.php\/category\/certification\/"},"img":{"alt_text":"update lettering text on black background","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/02\/pexels-photo-5697254.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/02\/pexels-photo-5697254.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/02\/pexels-photo-5697254.jpeg?fit=1200%2C800&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/02\/pexels-photo-5697254.jpeg?fit=1200%2C800&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/02\/pexels-photo-5697254.jpeg?fit=1200%2C800&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1303,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/02\/15\/pcnsa-1-3\/","url_meta":{"origin":1314,"position":4},"title":"PCNSA &#8211; 1.3","author":"Ben Story","date":"February 15, 2021","format":false,"excerpt":"Given a network design scenario, apply the Zero Trust security model and describe how it relates to traffic moving through your network.Palo Alto PCNSA Study Guide v10 Traditional Security Model In the traditional security model, internal devices, users, and applications were inherently trusted. No verification of the traffic once on\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/packitforwarding.com\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504-1.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504-1.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504-1.jpeg?fit=1200%2C800&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504-1.jpeg?fit=1200%2C800&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2018\/07\/security-protection-anti-virus-software-60504-1.jpeg?fit=1200%2C800&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1361,"url":"https:\/\/packitforwarding.com\/index.php\/2021\/06\/23\/pcnsa-3-5\/","url_meta":{"origin":1314,"position":5},"title":"PCNSA 3.5","author":"Ben Story","date":"June 23, 2021","format":false,"excerpt":"Identify the tools to optimize Security plicies.Palo Alto Networks PCNSA Study Guide v10 Policy Optimizer The policy optimizer helps to identify port based rules that can be converted to App-ID based rules for better visibility and security. It also calls out App-ID rules with unused applications (over-provisioned). Application based rules\u2026","rel":"","context":"In &quot;Certification&quot;","block_context":{"text":"Certification","link":"https:\/\/packitforwarding.com\/index.php\/category\/certification\/"},"img":{"alt_text":"pile of folders","src":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/06\/pexels-photo-357514.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/06\/pexels-photo-357514.jpeg?fit=1200%2C800&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/06\/pexels-photo-357514.jpeg?fit=1200%2C800&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/06\/pexels-photo-357514.jpeg?fit=1200%2C800&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/packitforwarding.com\/wp-content\/uploads\/2021\/06\/pexels-photo-357514.jpeg?fit=1200%2C800&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/posts\/1314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/comments?post=1314"}],"version-history":[{"count":4,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/posts\/1314\/revisions"}],"predecessor-version":[{"id":1419,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/posts\/1314\/revisions\/1419"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/media\/201"}],"wp:attachment":[{"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/media?parent=1314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/categories?post=1314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/packitforwarding.com\/index.php\/wp-json\/wp\/v2\/tags?post=1314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}