Network Security Professional labs
Every hands-on lab that maps to the Palo Alto Networks Network Security Professional certification. This is the full lab package for that certification.
Certification: Palo Alto Networks › Network Security Professional clear · browse all certifications
3 labs
Beginner
Firewall Patch Triage & Remediation: CVE-2024-3400
Triage a maximum-severity, CISA-KEV-listed PAN-OS GlobalProtect unauthenticated command injection (CVE-2024-3400) that gives root RCE on the perimeter firewall: confirm the version and GlobalProtect config, score it with CVSS, identify CWE-77, judge the pre-auth exposure, upgrade and verify, and assume breach given active exploitation.
Intermediate
Detection Engineering & Incident Response: CVE-2024-3400
Respond to a PAN-OS GlobalProtect command-injection compromise (CVE-2024-3400). Reconstruct the timeline from the access and service logs, see how shell metacharacters in the SESSID value ran commands as root, find the web-implant persistence, engineer a detection rule for the malicious SESSID pattern, then contain, eradicate, upgrade, verify and report - assuming breach.
Expert
Root-Cause & Secure-Code Remediation: CVE-2024-3400
Fix CVE-2024-3400 at the source. Read the vulnerable PAN-OS GlobalProtect telemetry helper, see how it passes the SESSID value into a shell command run as root (CWE-77), reject a metacharacter denylist, run the helper with an argument vector (execve, no shell) with input validation, restrict exposure, and verify with audit and vulnscan.