Cybersecurity
Palo Alto NGFW Engineer: NAT Policy Design
NAT policy on Palo Alto Networks firewalls is straightforward only when engineers keep the original packet, the translated packet, routing,…
ExamTopics reading room
All articles
Explore more technical insights and certification explainers. Page 3 of 195.
From the editorial desk
Browse the archive
Technical explainers and certification perspectives from our editorial library.
Cybersecurity
Palo Alto NGFW Engineer: Decryption Policy Design and TLS Inspection
TLS inspection on a Palo Alto Networks firewall is not just a switch that exposes encrypted payloads. It is a…
Cybersecurity
Palo Alto NGFW Engineer: App-ID & User-ID
App-ID and User-ID are two of the central policy dimensions on Palo Alto Networks next-generation firewalls. App-ID identifies applications based…
Cybersecurity
Fortinet FCSS-SASE 25: ZTNA Design
Zero trust network access with Fortinet should be designed around applications, identities, devices, and explicit trust decisions rather than around…
Cybersecurity
Fortinet FCSS-SASE 25: FortiSASE Architecture for Hybrid Work
FortiSASE architecture for hybrid work has to support users who move among corporate offices, home networks, travel, contractor devices, and…
Cybersecurity
Fortinet FCP-FMG 7.6: FortiManager Policy Packages and ADOMs
FortiManager policy packages and administrative domains are the core tools for turning many FortiGate appliances into one governable policy system.…
Cybersecurity
Fortinet FCP-FMG 7.6: FortiManager Device Provisioning at Scale
FortiManager device provisioning at scale is about converting a repeatable deployment standard into a controlled lifecycle. The current official exam…
Cybersecurity
Fortinet FCSS-EFW 7.6: Security Fabric Architecture
Fortinet Security Fabric is best understood as an architecture for sharing context and coordinating control across security and networking components,…
Cybersecurity
Fortinet FCSS-EFW 7.6: Enterprise Segmentation with FortiGate
Enterprise segmentation with FortiGate is a policy-design problem before it is a firewall configuration problem. VLANs, subnets, zones, virtual domains,…