Which security frameworks is this skill mapped to?

The implementation is mapped to five major frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, and NIST AI RMF.

Does it cover SSL decryption configuration?

Yes, the skill provides specific workflows for configuring SSL Forward Proxy, generating CA certificates, and setting up decryption profiles.

Can this help with migrating legacy firewall rules?

Yes, it includes guidance on using the Policy Optimizer to transition from traditional port-based rules to modern App-ID rules.

Does this skill support virtual firewall deployments?

Yes, it is compatible with both physical PA-series hardware appliances and VM-Series virtual firewalls running PAN-OS 10.2 or later.

Palo Alto NGFW Implementation

Name: Palo Alto NGFW Implementation
Author: mukul975

bymukul975

•

4,121

•

Security & Testing

Configures and deploys Palo Alto Networks next-generation firewalls using advanced security features like App-ID, User-ID, and SSL decryption.

This skill provides structured guidance and automated patterns for implementing Palo Alto Networks Next-Generation Firewalls (NGFW). it assists security engineers in moving beyond legacy port-based rules to application-aware security policies by leveraging App-ID, User-ID, and Content-ID technologies. Whether you are setting up initial zone-based architectures, configuring SSL Forward Proxy decryption, or establishing threat prevention profiles, this skill ensures your network deployment aligns with enterprise security best practices and compliance frameworks like NIST CSF 2.0.

Key Features

01SSL Forward Proxy decryption for encrypted traffic visibility

02App-ID traffic classification and policy optimization

034,121 GitHub stars

04Zone-based architecture and protection profile configuration

05Comprehensive threat prevention (Anti-Virus, Anti-Spyware, Vulnerability Protection)

06Identity-based enforcement through User-ID integration

Use Cases

01Deploying a new PA-series appliance or VM-Series firewall in a corporate network

02Migrating legacy port-based firewall rules to modern application-aware policies

03Implementing advanced threat protection and SSL decryption for compliance requirements

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills implementing-next-generation-firewall-with-palo-alto

For use in Claude.ai and ChatGPT

Key Features

01SSL Forward Proxy decryption for encrypted traffic visibility

02App-ID traffic classification and policy optimization

034,121 GitHub stars

04Zone-based architecture and protection profile configuration

05Comprehensive threat prevention (Anti-Virus, Anti-Spyware, Vulnerability Protection)

06Identity-based enforcement through User-ID integration

Use Cases

01Deploying a new PA-series appliance or VM-Series firewall in a corporate network

02Migrating legacy port-based firewall rules to modern application-aware policies

03Implementing advanced threat protection and SSL decryption for compliance requirements

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills implementing-next-generation-firewall-with-palo-alto

For use in Claude.ai and ChatGPT