Cybersecurity
Palo Alto SecOps Pro: Cortex XDR Incident Analysis
Cortex XDR incident analysis is about reconstructing what happened across alerts, endpoints, users, network events, and related evidence. An incident…
Explore / Technology subjects
Cybersecurity
Cybersecurity architecture, identity, network defense, vulnerabilities, threat detection, risk and incident response.
The reading room
All insights
Latest in Cybersecurity
296 published articles in this category.
Cybersecurity
Palo Alto SecOps Pro: SOC Metrics That Matter
SOC metrics are useful only when they change operational decisions. Counting alerts, tickets, or blocked threats is easy, but those…
Cybersecurity
Fortinet FCP-FGT 7.6: FortiGate SSL VPN and IPsec VPN Design
FortiGate remote-access design changed materially in the FortiOS 7.6 train. Starting with FortiOS 7.6.3, SSL VPN tunnel mode is no…
Cybersecurity
Fortinet FCP-FGT 7.6: FortiGate Security Profiles & UTM
FortiGate security profiles add content and threat inspection to traffic that firewall policy has already decided may pass. In FortiOS…
Cybersecurity
Fortinet FCP-FAZ 7.6: FortiAnalyzer Logging, Reports, and Events
FortiAnalyzer turns security-device logs into searchable operational evidence, reports, events, and incident context. In the current Fortinet certification program, the…
Cybersecurity
Fortinet FCP-FAZ 7.6: SOC Workflows with FortiAnalyzer
FortiAnalyzer can support a security operations center by connecting telemetry, detections, incident records, analyst investigation, and automation. In FortiAnalyzer 7.6,…
Cybersecurity
Fortinet FCSS-EFW 7.6: Enterprise Troubleshooting
FortiGate troubleshooting becomes much faster when the engineer stops treating the firewall as a black box and instead follows the…
Cybersecurity
Fortinet FCSS-EFW 7.6: Enterprise Segmentation with FortiGate
Enterprise segmentation with FortiGate is a policy-design problem before it is a firewall configuration problem. VLANs, subnets, zones, virtual domains,…
Cybersecurity
Fortinet FCSS-EFW 7.6: Security Fabric Architecture
Fortinet Security Fabric is best understood as an architecture for sharing context and coordinating control across security and networking components,…
Cybersecurity
Fortinet FCP-FMG 7.6: FortiManager Device Provisioning at Scale
FortiManager device provisioning at scale is about converting a repeatable deployment standard into a controlled lifecycle. The current official exam…
Cybersecurity
Fortinet FCP-FMG 7.6: FortiManager Policy Packages and ADOMs
FortiManager policy packages and administrative domains are the core tools for turning many FortiGate appliances into one governable policy system.…
Cybersecurity
Fortinet FCSS-SASE 25: FortiSASE Architecture for Hybrid Work
FortiSASE architecture for hybrid work has to support users who move among corporate offices, home networks, travel, contractor devices, and…
Cybersecurity
Fortinet FCSS-SASE 25: ZTNA Design
Zero trust network access with Fortinet should be designed around applications, identities, devices, and explicit trust decisions rather than around…
Cybersecurity
Palo Alto NGFW Engineer: App-ID & User-ID
App-ID and User-ID are two of the central policy dimensions on Palo Alto Networks next-generation firewalls. App-ID identifies applications based…
Cybersecurity
Check Point 156-315.82: Threat Prevention & SandBlast
Check Point Threat Prevention combines multiple Software Blades to detect and block malicious activity before and after infection. In the…