Palo Alto Prisma SASE

Handle security policy configuration:

Security rules, NAT, PBF
Application-based rules
Decryption policies (SSL forward / inbound)

Object management:

Address, service, application, tags
Dynamic Address Groups (DAG)
External Dynamic Lists (EDL)

Implement and troubleshoot:

IPSec VPNs (Site-to-Site, IKEv1/IKEv2)
GlobalProtect VPN

Troubleshoot traffic flow using:

Traffic logs
Session browser
Packet capture
Policy Optimizer
Test policy match

Perform PAN-OS upgrades and hotfix installations

Manage firewalls using Panorama:

Device groups, templates, template stacks

Push and validate:

Security policies
Network templates

Troubleshoot:

Policy sync issues
Template mismatches
Commit failures and push errors

Handle firewall onboarding/decommissioning in Panorama
Manage shared vs local policies

Advanced Troubleshooting & Networking

Troubleshoot routing and connectivity:

Static routing, BGP (basic to intermediate)

Analyze asymmetric routing and session drops
Handle HA (Active/Passive):

Synchronization issues
Failover testing
HA monitoring

Incident & Change Management

Provide escalation support for firewall incidents
Root cause analysis (RCA) for security and connectivity issues
Implement and validate changes via change management (ITIL)
Support audit, compliance, and risk review activities
Coordinate with vendors (Palo Alto TAC) for advanced issues

Strata Cloud Manager & Prisma Access

• Hands-on experience with Strata Cloud Manager (SCM) for centralized management of NGFW and/or Prisma solutions.
• Hands-on experience configuring Prisma Access through SCM, including security policy and Remote Networks administration.

Mandatory Skills: Palo Alto Prisma Access .

Experience: 5-8 Years .