Network Security Administrator NetSec-Pro Updated Exam

Cloud NGFW for AWS can be configured usingPanoramafor centralized management, as well as theAWS management consolefor native integration and configuration.

“You can configure Cloud NGFW for AWS using Panorama for centralized security management, or directly through the AWS management console to deploy and manage security services for your AWS resources.”

(Source: Cloud NGFW for AWS Guide)

Protecting againstmaliciousandmisconfigured domainsrequires two critical services:

Advanced Threat Prevention

Provides signature-based and advanced analysis to identify threats, including DNS-based attacks.

“Advanced Threat Prevention enables the NGFW to detect and prevent exploits and malware-based communications, including those leveraging DNS.”

(Source: Advanced Threat Prevention)

Advanced DNS Security

Specifically designed to detect and sinkhole malicious and misconfigured DNS queries.

“DNS Security uses real-time intelligence to block DNS-based threats, protect against data exfiltration, and automatically sinkhole suspicious domain lookups.”

(Source: DNS Security)

Bycombiningthese services in security policies, NGFWs ensure robust protection against domain-based threats and misconfigurations.

When usingAWS centralized deploymentsfor Cloud NGFW, the service deploys NGFW instances intoselected VPCsas additional workloads to secure that traffic.

“In centralized deployments, Cloud NGFW instances are deployed as security appliances within the selected VPCs, ensuring consistent traffic inspection and protection.”

(Source: Cloud NGFW Deployment Models)

This approach minimizes complexity and ensures direct security policy enforcement within AWS.

Dynamic path selectionis the foundation of SD-WAN, leveraging real-time performance data to dynamically route traffic over the best available path.

“Dynamic path selection continuously monitors performance metrics (loss, latency, jitter) and makes real-time routing decisions to ensure application SLAs are met across the WAN.”

(Source: Prisma SD-WAN Dynamic Path Selection)

Establishing dynamic path selection first ensures the rest of the SD-WAN optimizations (e.g., failover, QoS) work effectively.