Lab-based learning · Updated weekly

Network security & SASE, decoded for L1–L3 engineers.

Start with one product (how it works, then evidence). Then follow a course path so a student can actually finish Zscaler, Palo Alto, Fortinet, Cisco, F5 or CISSP.

Open a course path 💼 Interview Q&A 🎮 Play Cyber Arena Practice exams → Glossary →

80: Course lessons
7: Course paths
1,400+: Practice MCQs
Free: Forever

Loading product directory…

💼

Crack the interview · Tag-wise

Interview Q&A Hub

34 question banks across 10 tracks — Palo Alto, Zscaler, FortiGate, CCNA, BGP, SOC, VAPT and more. Real questions, model answers & an assessment in every set.

Browse Q&A

🎮

New · Learn by playing

Cyber Arena

Race the clock against 1,400+ real exam-style questions across 16 tracks. Daily Challenge, combos, XP & ranks — the science-backed way to make it stick.

Play now

Find your lesson

Loading…

Finish a course, not a random page

Course paths students actually complete

Each path is a classroom sequence: concept, packet path, config, proof, then interview. Old mass-generated pages are off this library.

Complete the ZIA + ZPA course

Zscaler

Fourteen classroom lessons plus the gold authentication and tunnel runbooks. Read in order.

01Start · How the exchange works 02Start · Prove it in logs 0301 · Zero Trust foundation 0402 · ZIA architecture 0503 · Traffic forwarding 06GRE and IPSec tunnels 07ZIA traffic flow end to end 0804 · Authentication and ZCC 09SAML + SCIM with Entra ID 1005 · URL and Cloud App control 1106 · SSL inspection 1207 · Threat protection 1308 · DLP and CASB 1409 · ZPA architecture 1510 · App / Branch / Cloud Connector 1611 · ZPA policy and segments 1712 · CBI and SIPA 1813 · Logs, ZDX, five tickets 1914 · ZDTA and interview

Complete the PAN-OS course

Palo Alto

Full-stack operator map first, then session model, zones, policy, NAT, VPN, decryption, HA.

00Start · Full stack map 01Start · Session factory 02Start · Evidence desk 03Architecture and SP3 04Zones, interfaces, VR 05Security policy 06Security profiles 07NAT 08SSL decryption 09URL filtering 10Threat prevention 11GlobalProtect 12IPSec site-to-site 13PBF and multi-VR 14HA A/P vs A/A 15Session table and flow 16Interview Q&A

Complete the FortiGate course

Fortinet

New F5-format class: FGT/FMG/FAZ, first-match policy, VIP, debug flow, IPsec, SSL-VPN, SD-WAN SLA, VDOM, HA.

01FGT / FMG / FAZ 02First day 03Policy first match 04SNAT vs VIP 05Profiles + SSL 06debug flow 07IPsec S2S 08SSL-VPN vs RA 09SD-WAN SLA 10VDOM 11FGCP HA 12Interview

FTD / FMC + ISE

Cisco

Platform, ACP, NAT, VPN, Snort, then ISE reason codes.

01Start · LINA + Snort 02Start · Evidence desk 03FTD / FMC fundamentals 04Architecture and platforms 05Interface modes 06Access control policy 07NAT 08VPN 09Snort 3 IPS 10FTD interview 11ISE · reason code first 12ISE · evidence desk 13ISE interview

LTM + ASM

F5 BIG-IP

VIP is a listener. Then the command ladder you actually type in a war room.

01Start · VIP is a listener 02Start · Evidence desk 03Command ladder cheatsheet 04Interview Q&A

All 8 domains

CISSP

Manager mindset, then each domain as a classroom lesson.

01All 8 domains map 02Domain 1 · Risk 03Domain 2 · Assets 04Domain 3 · Architecture 05Domain 4 · Network 06Domain 5 · IAM 07Domain 6 · Assessment 08Domain 7 · Operations 09Domain 8 · Software

Analyst desk

SOC & interview

SIEM thinking, packet analysis, Linux, then the interview banks students actually use.

01SOC analyst interview 02Wireshark interview 03Linux interview 04VAPT interview 0522 browser CLI labs

Lessons in the library

Only course-complete lessons. Pick a vendor chip, then read in path order.

Curated 2026-08-15

Check Point to Palo Alto Migration — Zones, NAT, App-ID

PAN-OS · Check Point cutover

What tools convert, what you must do by hand, and the NAT/zone traps that break cutover.

Network security & SASE, decoded for L1–L3 engineers.

Interview Q&A Hub

Cyber Arena

Course paths students actually complete

Zscaler

Palo Alto

Fortinet

Cisco

F5 BIG-IP

CISSP

SOC & interview

Lessons in the library

Check Point to Palo Alto Migration — Zones, NAT, App-ID

GlobalProtect vs ZPA — Rahul, ERP, and a safe pilot

How to create a captive portal certificate on ClearPass

Versa SD-WAN Four Planes and Day-0 Staging

Viptela SD-WAN Four Planes and Day-0 Bring-Up

Hybrid Interview: 16 Migration Scenarios

Cutover and Rollback: DNS Flip and Soak

Map Security Controls: FortiGate to Cloud

VM Lift vs Rebuild: Azure Migrate and AWS MGN

Network: VPN First, ExpressRoute and Direct Connect Later

Identity First: AD to Entra and IAM Identity Center

Landing Zone First: Identity, Hub, Logging

Migration 6 Rs: Choose a Path Per App

AWS Security Interview: 20 Scenario Questions

S3 Public Access: The Logo That Leaked the Backup

Transit Gateway Hub and Site-to-Site VPN

CloudTrail, GuardDuty, Security Hub

VPC Endpoints vs Public NAT to S3

KMS Keys and Secrets — Not User-Data

IAM Roles, Not Long-Lived User Keys

Security Groups vs Network ACLs

Organizations, OUs, SCPs, Control Tower First

AWS Shared Responsibility + IAM Is the Perimeter

Azure Security Interview: 20 Scenario Questions

Azure Identity Attack Path

Azure Hub-Spoke: VPN and ExpressRoute

Azure Defender for Cloud vs Microsoft Sentinel

Azure Private Link vs Public Endpoints

Azure Key Vault and Managed Identity

Azure Conditional Access and Break-Glass

Azure NSG vs Firewall vs WAF

Azure Landing Zone: Management Groups and Subscriptions

Azure Shared Responsibility and Entra ID

VPN Interview: 18 Scenario Questions

FortiGate to AWS Site-to-Site VPN

FortiGate Route-Based IKEv2 to Azure VPN Gateway

SSL-VPN Split Tunnel vs Full Tunnel

Route-Based vs Policy-Based IPsec

Phase-2 Down: Proxy ID and Encryption Domain

IKE Phase-1 Never Comes Up

Site-to-Site vs Remote-Access vs ZTNA

FortiGate Interview: 20 Scenario Questions

FortiGate FGCP HA Failover

FortiGate VDOM: Split Tenants, Split Routing

FortiGate SD-WAN SLA Is Not a Policy Route

FortiGate SSL-VPN vs IPsec Remote Access

FortiGate IPsec Site-to-Site

FortiGate diagnose debug flow and the Session Table

FortiGate Security Profiles and SSL Inspection

FortiGate NAT: SNAT vs VIP (DNAT)

FortiGate Policy: First Match Wins

FortiGate First Day: Interfaces, Zones, Admin, DNS

FortiGate Architecture: FortiGate, FortiManager, FortiAnalyzer

Forescout vs ISE + 16 Interview Questions

Forescout OT/IoT: Do Not Scan Blind

Forescout eyeExtend to ISE and Firewall

Forescout Switch Plugin: VLAN and ACL

Forescout Virtual Firewall vs 802.1X

Forescout Policy: First Match and Inspect vs Control

Forescout Classification: Empty Profile

Forescout Discovery: Passive vs Active

Forescout First-Day Appliance Setup

Forescout eyeSight, eyeControl, eyeExtend

Cisco ISE Interview: 20 Scenario Questions

Cisco ISE vs Forescout vs ClearPass

Cisco ISE Live Logs: Find the Reject

Cisco ISE Authorization: dACL vs VLAN

Cisco ISE Profiling: Unknown Endpoint