Palo Alto Networks Panorama: NGFW Management Training

Over two days, this course shows how to run a fleet of Palo Alto Networks firewalls from Panorama, the centralized management console: onboarding devices, templates and variables, device groups, logging, reporting and administration. It also covers design and sizing choices for a deployment. It is the natural follow-on to EDU-210 and the second course the vendor recommends for the Next-Generation Firewall Engineer certification. Hands-on labs simulate managing several sites from a single console. By the end of the course, participants can structure a shared configuration that limits drift between sites and speeds up changes across the estate. The course is especially useful for organizations running firewalls in several branches, data centres or cloud environments.

The essentials

Objectives

Program

  1. Initial configuration
    • Deployment modes, licensing, updates
  2. Adding firewalls
    • Registering devices, synchronization
  3. Templates
    • Template stacks, variables, local overrides
  4. Device groups
    • Hierarchy, pre/post rules, shared objects
  5. Log collection and forwarding
    • Log Collectors, Collector Groups
    • Forwarding to external systems
  6. Using Panorama logs
    • Searching, filtering and correlation
  7. Administrative accounts
    • Roles, access domains
  8. Reporting
    • Predefined and custom reports
  9. Troubleshooting
    • Commits, configuration push, connectivity

Prerequisites

Target audience

The exam

No exam is included in the course. It complements EDU-210 in preparing for the Next-Generation Firewall Engineer certification, which replaced PCNSE on 31 July 2025. Centralized management features in the device settings and integration domains. The vendor does not publish the question count or exam length; the exam is in English, with 30 extra minutes in non-English-speaking countries. We advise reading the official exam datasheet, which details every topic and subtopic, and practicing template and device group design on a lab Panorama before booking the exam.

Preparation tips

Frequently asked questions (FAQ)

What is the Panorama course code?

The vendor's current page lists the course as "Panorama: NGFW Management"; the former EDU-220 code no longer appears there.

Should I take EDU-210 first?

Yes, it is recommended. The course assumes you can already configure a single Palo Alto Networks firewall, including interfaces, zones, security policy and NAT, so that class time can focus on centralized management.

Does this course prepare for NGFW Engineer?

Yes, together with EDU-210; they are the two courses the vendor recommends for that certification.

Does Panorama also manage virtual firewalls?

Yes. Panorama manages both hardware appliances and VM-Series virtual firewalls from one console, which makes it well suited to hybrid environments.

How is the course delivered?

In French or English, as a live online class, in person in Casablanca, or on-site at your organization for a dedicated team.

Related trainings

Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.

Securevalley is not a training partner of Palo Alto Networks. Palo Alto Networks, Panorama, PAN-OS and VM-Series are trademarks of Palo Alto Networks.

Related trainings