The Palo Alto Networks Cloud Security Fundamentals course shifts the focus from traditional hardware-based security to the virtualized, elastic world of cloud computing. It’s designed to explain how security must change when the "perimeter" is no longer a physical office but a collection of distributed services.
For 2026, this course is heavily centered on the Prisma ecosystem and the Shared Responsibility Model.
This course introduces the essential concepts of cloud computing and the unique security challenges presented by public, private, and hybrid cloud environments. Students will learn how to secure "the cloud itself" (infrastructure) as well as "what is in the cloud" (data and applications). The curriculum focuses on the convergence of networking and security through SASE (Secure Access Service Edge) and the automation of security in the CI/CD pipeline.
Cloud Computing Models: A deep dive into NIST service models (SaaS, PaaS, IaaS) and deployment models (Public, Private, Hybrid, Multi-cloud).
The Shared Responsibility Model: Understanding exactly what the Cloud Service Provider (e.g., AWS, Azure, GCP) is responsible for versus what the customer must secure.
Cloud Native Security: Introduction to Containers (Docker), Orchestration (Kubernetes), and Serverless computing, along with the specific risks associated with each.
The Prisma Suite: * Prisma Cloud: Learn about Cloud Native Security Platforms (CNSP) and how to maintain visibility, compliance, and governance.
Prisma Access: Understanding how SASE provides consistent security for remote users without backhauling traffic to a data center.
Virtualization Security: Exploring the role of hypervisors, virtual switches, and East-West traffic protection (traffic between servers within the cloud).
DevSecOps & Automation: How to "shift left" by integrating security earlier in the software development lifecycle.
Cloud Architects & Admins: Professionals responsible for migrating or managing assets in cloud environments.
DevOps Engineers: Individuals looking to integrate automated security checks into their deployment pipelines.
Cybersecurity Beginners: Those wanting to understand how modern "borderless" networks are defended.
Cloud Foundations: History of cloud computing, virtualization basics, and the evolution of the data center.
Cloud Security Challenges: Addressing the "visibility gap," misconfigurations, and the risks of shadow IT.
Securing Public Clouds: Implementation of security controls within AWS, Microsoft Azure, and Google Cloud Platform.
SASE & Prisma Access: Transitioning from legacy VPNs to a cloud-delivered security architecture.
Containers and Kubernetes: Practical introduction to Docker basics and securing containerized applications.
SaaS Security: Using Prisma SaaS (CASB) to protect data within applications like Office 365, Salesforce, and Slack.
This course is a core pillar for the PCCET (Certified Cybersecurity Entry-level Technician) and serves as the mandatory bridge for anyone pursuing the Prisma Cloud Professional or SASE Professional certifications.
Pro Tip: If you're building a training program, this is best taken after "Network Security Fundamentals," as cloud security heavily relies on understanding the networking concepts (like IP addressing and routing) covered in that course.
- -
This course provides a deep dive into the technical "plumbing" of secure networks. It moves beyond high-level threats to focus on how data moves across a network and how to build a defensive architecture to protect that data. Students will gain a functional understanding of network protocols, packet lifecycle, and the implementation of Zero Trust principles using Next-Generation Firewalls (NGFW) and SASE (Secure Access Service Edge).
Networking Foundations: Mastery of the OSI and TCP/IP models, including a deep dive into physical, logical (IP), and virtual addressing (Subnetting).
Packet Lifecycle: Trace the path of a packet as it traverses the network and understand how encapsulation and decapsulation work at each layer.
Defense-in-Depth Technologies: Comparative analysis of packet filtering, stateful inspection, and application-aware firewalls.
The "Core Three" Technologies: Introduction to Palo Alto Networks’ signature capabilities: App-ID™, User-ID™, and Content-ID™.
Network Segmentation: How to design and configure Security Zones (Inside, Outside, DMZ) to enforce "Least Privilege" access.
Securing the Perimeter & Edge: Understanding the role of VPNs (IPSec/SSL), IPS/IDS, and the transition to cloud-delivered security via Prisma SASE.
Aspiring Network Engineers: Those looking to build a technical career in network infrastructure.
Security Admins: Professionals responsible for the day-to-day configuration of firewalls and security policies.
IT Generalists: Help desk or systems administrators who need to troubleshoot connectivity and security issues.
The Connected Globe: Evolution of network connectivity and the Internet of Things (IoT).
Addressing & Routing: Detailed look at IPv4/IPv6, subnetting, and how routers make forwarding decisions.
The OSI Model & Encapsulation: Understanding layers 1 through 7 and how data is packaged for transport.
Network Security Principles: Moving from legacy "Port/Protocol" security to Identity-based security.
Introduction to Strata (NGFW): The architecture of the Next-Generation Firewall and initial configuration steps.
Cryptography & PKI: The role of SSL/TLS certificates in securing network traffic and inspecting encrypted data.
Cloud & SASE Fundamentals: Introduction to Prisma Access and securing the mobile workforce.
This course is specifically designed to prepare students for the Network Security Professional level of the Palo Alto Networks certification framework. It provides the technical baseline required before moving into specialist courses like NGFW Engineer or SASE Engineer.
- -
No results match your search. Try removing a few filters.