Chapter 10: VPN and Advanced Protection
In this chapter, we will learn about advanced configuration features, such as site-to-site VPN and the challenges it poses when connecting to different vendors. We will learn how to set up a GlobalProtect VPN and verify whether hosts connecting remotely are in a permissible state to enter the network or need to be quarantined. We will create custom applications and custom threats and apply them to a policy, and we will review how zone protection and Denial of Service (DoS) protection can defend the network and individual resources from attackers.
In this chapter, we're going to cover the following main topics:
- Site-to-site VPN
- The GlobalProtect client and satellite VPN
- Custom applications and application override
- Custom threat signatures
- Zone protection and DoS protection
