Palo Alto PSE Strata case studies
Palo Alto PSE Strata · Put your knowledge to work in context.
The Palo Alto Networks PSE Strata credential is a professional-level certification aimed at systems engineers and pre-sales technical staff who design, position, and support Palo Alto Networks network security solutions. The exam is organized around four equally weighted domains: Network Security, Cloud-Delivered Security Services, Strata Cloud Manager, and Hardware and Software Firewalls. The Palo Alto PSE Strata case studies are 5 cases and about 4,133 words.
1SaaS App Alternately Allowed and Blocked After ECMP Change
Harborline Retail runs a PA-3410 active/passive pair at headquarters, serving 3,200 employees with a 1 Gbps fiber internet circuit and a 500 Mbps fixed-wireless backup. Guest traffic is steered to the backup circuit by a policy-based forwarding rule.
785 words, about 4 min2Choosing Two Security Subscriptions With Five Identified Gaps
Northbridge Credit Union runs 40 branch PA-440s and one PA-1420 hub on PAN-OS 10.2 with Threat Prevention, URL Filtering and WildFire licensed, but no DNS Security and no data loss prevention. Over six weeks the SOC records four events.
810 words, about 4 min3Global Policy, EU Logging Exception and Duplicate Objects in Strata Cloud Manager
Meridian Logistics manages 48 firewalls in Strata Cloud Manager: 40 PA-440s in branches, six PA-1420s in regional data centers and two PA-5220s at hubs, arranged under NA, EU and APAC folders. The security team wants one global baseline, an EU-only exception that keeps employee URL logs inside the EU, and a per-region DNS resolver value.
844 words, about 4 min4Replacing an Aging Branch Pair With Two Gbps of Inspected Traffic
Calder Precision operates two plants 400 meters apart, 1,400 employees and two 1 Gbps internet links. All outbound traffic is decrypted with SSL forward proxy and inspected with Threat Prevention and WildFire, and 200 IPsec tunnels terminate from branch offices.
845 words, about 4 min5Double Inspection Breaks mTLS After CN-Series Rollout
An online retailer runs 42 services on Amazon EKS in us-east-1 across six namespaces, peaking at about 3 Gbps of east-west traffic, with a VM-Series pair behind a Gateway Load Balancer for north-south inspection and CN-Series deployed as a DaemonSet on every node. Security policy is split: internet-facing rules live in Strata Cloud Manager, service-to-service rules in a Panorama template pushed by a platform team.
849 words, about 4 min