Muutke küpsiste eelistusi

E-raamat: Palo Alto Networks from Policy to Code: Automate PAN-OS security policies with Python precision

  • Formaat: PDF+DRM
  • Ilmumisaeg: 29-Aug-2025
  • Kirjastus: Packt Publishing Limited
  • Keel: eng
  • ISBN-13: 9781835881293
Teised raamatud teemal:
  • Formaat - PDF+DRM
  • Hind: 28,07 €*
  • * hind on lõplik, st. muud allahindlused enam ei rakendu
  • Lisa ostukorvi
  • Lisa soovinimekirja
  • See e-raamat on mõeldud ainult isiklikuks kasutamiseks. E-raamatuid ei saa tagastada.
  • Formaat: PDF+DRM
  • Ilmumisaeg: 29-Aug-2025
  • Kirjastus: Packt Publishing Limited
  • Keel: eng
  • ISBN-13: 9781835881293
Teised raamatud teemal:

DRM piirangud

  • Kopeerimine (copy/paste):

    ei ole lubatud

  • Printimine:

    ei ole lubatud

  • Kasutamine:

    Digitaalõiguste kaitse (DRM)
    Kirjastus on väljastanud selle e-raamatu krüpteeritud kujul, mis tähendab, et selle lugemiseks peate installeerima spetsiaalse tarkvara. Samuti peate looma endale  Adobe ID Rohkem infot siin. E-raamatut saab lugeda 1 kasutaja ning alla laadida kuni 6'de seadmesse (kõik autoriseeritud sama Adobe ID-ga).

    Vajalik tarkvara
    Mobiilsetes seadmetes (telefon või tahvelarvuti) lugemiseks peate installeerima selle tasuta rakenduse: PocketBook Reader (iOS / Android)

    PC või Mac seadmes lugemiseks peate installima Adobe Digital Editionsi (Seeon tasuta rakendus spetsiaalselt e-raamatute lugemiseks. Seda ei tohi segamini ajada Adober Reader'iga, mis tõenäoliselt on juba teie arvutisse installeeritud )

    Seda e-raamatut ei saa lugeda Amazon Kindle's. 

Create automated security policies for Palo Alto Networks firewalls that transform manual processes into scalable, code-based solutions

Key Features

Streamline security policy deployment using Python and automation tools Learn how PAN-OS processes and secures enterprise network traffic Implement automated security actions for real-time threat mitigation Get With Your Book: PDF Copy, AI Assistant, and Next-Gen Reader Free

Book DescriptionPalo Alto Networks firewalls are the gold standard in enterprise security, but managing them manually often leads to endless configurations, error-prone changes, and difficulty maintaining consistency across deployments. Written by cybersecurity experts with deep Palo Alto Networks experience, this book shows you how to transform firewall management with automation, using a code-driven approach that bridges the gap between powerful technology and practical implementation. Youll start with next-gen firewall fundamentals before advancing to designing enterprise-grade security policies, applying threat prevention profiles, URL filtering, TLS decryption, and application controls to build a complete policy framework. Unlike other resources that focus on theory or vendor documentation, this hands-on guide covers best practices and real-world strategies. Youll learn how to automate policy deployment using Python and PAN-OS APIs, structure firewall configurations as code, and integrate firewalls with IT workflows and infrastructure-as-code tools. By the end of the book, youll be able to design, automate, test, and migrate firewall policies with confidence, gaining practical experience in quality assurance techniques, pilot testing, debugging, and phased cutoversall while maintaining security and minimizing business impact.What you will learn

Master next-generation firewall fundamentals Design enterprise-grade security policies for the Internet gateway Apply App-ID, URL filtering, and threat prevention Automate policy deployment using Python, PAN-OS APIs, SDKs, and IaC tools Customize response pages with Jinja2 and integrate them into service desk workflows Test and validate with QA techniques and pilot testing Migrate policies with confidence and zero downtime

Who this book is forThis book is for firewall engineers, security engineers, consultants, technical architects, and CISOs who want to enhance their network security expertise through Policy as Code on Palo Alto Networks firewalls. It's also perfect for those with working knowledge of Python programming and hands-on experience with Palo Alto Networks' Next-Gen firewalls, whether in business, government, or education. This book will help network engineers, security architects, and DevSecOps professionals simplify firewall management and reduce operational overhead.
Table of Contents

Next-Gen Firewall Fundamentals
Navigating Real-World Firewall Management and Cyber Risks
PAN-OS Security Policy Features: Connection Matching
PAN-OS Security Policy Features: Connection Processing
Security Policy Design
Firewall Automation and Management Choices
Setting Up Your Software Development Environment
Policy to Code: Foundations
Policy to Code: Advanced
Quality Assurance and Testing
Your First Cutover and Next Steps
Nikolay Matveev holds a degree in Information Systems in Nuclear Power Engineering and has more than 25 years of IT experience, including 12 years working with Palo Alto Networks technologies. Based in London, U.K., he is a Principal Security Engineer at a major U.S. investment firm. Previously, he was a Professional Services Consultant at Palo Alto Networks and has held technical roles across financial services, consulting, and manufacturing. Nikolay is a CISSP (ISC2). He previously held certifications including PCNSC, PCNSE, MCSE, VCP-DCV, and CCNA. Migara Ekanayake is a seasoned cybersecurity professional with over a decade of experience in cloud security, network automation, and professional services. Currently serving as a Global Solutions Architect for Cloud Security Automation at Palo Alto Networks, Migara has been instrumental in helping organizations worldwide secure their digital transformations. With a career spanning roles at industry leaders like Palo Alto Networks and F5 Networks, Migara has developed a deep understanding of cloud platforms, application security, and network infrastructure. Migara's diverse background, which includes roles in software development and network security, provides him with a unique perspective on the intersections of technology, business, and security.