Exam Vouchers: Palo Alto Networks: SD-WAN Engineer (PAN-SDWANE)

The Palo Alto Networks Certified SD-WAN Engineer certification is designed to validate experienced SD-WAN engineers on their knowledge and skills in architecture, pre-deployment planning, policy design and management, deployment configuration, post-deployment, and operations. The certification also validates the ability to review and manage analytics to achieve network transformation outcomes.

Candidates should be able to demonstrate an understanding of SD-WAN processes and procedures.

• Working knowledge of network security
• Working knowledge of TCP/IP and how traffic is directed within a network, including routing protocols
• Working knowledge of networking infrastructure, protocols, and topology
• Basic understanding of endpoint OS fundamentals and security hardening methods
• Working knowledge of secure access service edge (SASE) and security automation technology
• Basic knowledge of current and emergent trends in SD-WAN and information security
• Use security models/architectures (such as Defense in Depth, Zero Trust)
• Engineering level knowledge of Prisma SD-WAN
• Basic knowledge of programming and scripting languages such as Python, Powershell, and SQL

Planning and Design 24%

• Identify and describe device selection criteria
• Demonstrate understanding of the bandwidth plan
• Identify and describe device licensing options and tiers
• Explain the assessment of existing network architecture
• Identify and describe data center configuration and data center interconnection (DCI) options
• Explain branch (gateway) configuration
• Identify and describe security requirements and configuration
• Explain the process of planning for interconnectivity and high availability (HA)
• Explain policy design and management
• Path policies
• Security policies
• Quality of Service (QoS)
• Performance policies
• NAT policies

Deployment and Configuration 24%

• Explain Prisma SD-WAN deployment and configuration
• Identify and describe site-specific settings
• Explain the process of developing configuration templates for data centers and branches
• Explain dynamic and static routing protocol tuning
• Explain VRF implementation for network segmentation

Operations and Monitoring 18%

• Demonstrate understanding of device-level statistics monitoring
• Explain controller-generated incident, alert, statistics, and audit log monitoring
• Explain alert and notification configuration
• Demonstrate understanding of WAN Clarity reports
• Explain the implementation of network monitoring tools for real-time visibility
• Demonstrate understanding of monitoring and managing SASE-related events

Unified SASE 14%

• Explain the integration of Prisma SD-WAN with Prisma Access and Security policy setup
• Explain ADEM configuration for monitoring application performance
• Identify and describe network setting configurations to support IoT device connectivity based on Device-ID
• Explain the integration of Prisma SD-WAN with Cloud Identity Engine (CIE)
• Demonstrate understanding of path and Security policy implementation based on User / Group ID

Troubleshooting 20%

• Explain the process of troubleshooting connectivity issues between sites
• Demonstrate understanding of routing and forwarding issue resolution
• Identify and describe application performance issues
• Explain policy issue troubleshooting
• Describe data analysis using the co-pilot
• Explain the use of analytics to optimize network configurations and reporting

The following course should have been completed prior to sitting the exam.

• Prisma SD-WAN: Design and Operation