Next-Generation Firewall Engineer labs

Every hands-on lab that maps to the Palo Alto Networks Next-Generation Firewall Engineer certification. This is the full lab package for that certification.

1 lab

All levels Beginner Intermediate Expert

Cyber Security › Common Vulnerabilities
Expert

Root-Cause & Secure-Code Remediation: CVE-2024-3400

Fix CVE-2024-3400 at the source. Read the vulnerable PAN-OS GlobalProtect telemetry helper, see how it passes the SESSID value into a shell command run as root (CWE-77), reject a metacharacter denylist, run the helper with an argument vector (execve, no shell) with input validation, restrict exposure, and verify with audit and vulnscan.

20 steps 4 tasks ~80 min

Free while we launchFree for members View lab