Lab-based learning · Updated weekly

Network security & SASE, decoded for L1–L3 engineers.

Start with one product (how it works, then evidence). Then follow a course path so a student can actually finish Zscaler, Palo Alto, Fortinet, Cisco, F5 or CISSP.

Open a course path 💼 Interview Q&A 🎮 Play Cyber Arena Practice exams → Glossary →

80: Course lessons
7: Course paths
1,400+: Practice MCQs
Free: Forever

Loading product directory…

💼

Crack the interview · Tag-wise

Interview Q&A Hub

34 question banks across 10 tracks — Palo Alto, Zscaler, FortiGate, CCNA, BGP, SOC, VAPT and more. Real questions, model answers & an assessment in every set.

Browse Q&A

🎮

New · Learn by playing

Cyber Arena

Race the clock against 1,400+ real exam-style questions across 16 tracks. Daily Challenge, combos, XP & ranks — the science-backed way to make it stick.

Play now

Find your lesson

Loading…

Finish a course, not a random page

Course paths students actually complete

Each path is a classroom sequence: concept, packet path, config, proof, then interview. Old mass-generated pages are off this library.

Complete the ZIA + ZPA course

Zscaler

Fourteen classroom lessons plus the gold authentication and tunnel runbooks. Read in order.

01Start · How the exchange works 02Start · Prove it in logs 0301 · Zero Trust foundation 0402 · ZIA architecture 0503 · Traffic forwarding 06GRE and IPSec tunnels 07ZIA traffic flow end to end 0804 · Authentication and ZCC 09SAML + SCIM with Entra ID 1005 · URL and Cloud App control 1106 · SSL inspection 1207 · Threat protection 1308 · DLP and CASB 1409 · ZPA architecture 1510 · App / Branch / Cloud Connector 1611 · ZPA policy and segments 1712 · CBI and SIPA 1813 · Logs, ZDX, five tickets 1914 · ZDTA and interview

Complete the PAN-OS course

Palo Alto

Session model first, then zones, policy, NAT, VPN, decryption, HA.

01Start · Session factory 02Start · Evidence desk 03Architecture and SP3 04Zones, interfaces, VR 05Security policy 06Security profiles 07NAT 08SSL decryption 09URL filtering 10Threat prevention 11GlobalProtect 12IPSec site-to-site 13PBF and multi-VR 14HA A/P vs A/A 15Session table and flow 16Interview Q&A

Complete the FortiGate course

Fortinet

Policy lookup, NAT, VPN, SD-WAN, VDOM, HA — the path a FortiGate class actually walks.

01Start · Session + VDOM 02Start · Evidence desk 03Policies and NAT 04Security profiles 05Routing OSPF/BGP 06IPsec and SSL VPN 07SD-WAN SLA rules 08SD-WAN + ZTNA 09VDOMs 10FGCP HA 11Interview Q&A

FTD / FMC + ISE

Cisco

Platform, ACP, NAT, VPN, Snort, then ISE reason codes.

01Start · LINA + Snort 02Start · Evidence desk 03FTD / FMC fundamentals 04Architecture and platforms 05Interface modes 06Access control policy 07NAT 08VPN 09Snort 3 IPS 10FTD interview 11ISE · reason code first 12ISE · evidence desk 13ISE interview

LTM + ASM

F5 BIG-IP

VIP is a listener. Then the command ladder you actually type in a war room.

01Start · VIP is a listener 02Start · Evidence desk 03Command ladder cheatsheet 04Interview Q&A

All 8 domains

CISSP

Manager mindset, then each domain as a classroom lesson.

01All 8 domains map 02Domain 1 · Risk 03Domain 2 · Assets 04Domain 3 · Architecture 05Domain 4 · Network 06Domain 5 · IAM 07Domain 6 · Assessment 08Domain 7 · Operations 09Domain 8 · Software

Analyst desk

SOC & interview

SIEM thinking, packet analysis, Linux, then the interview banks students actually use.

01SOC analyst interview 02Wireshark interview 03Linux interview 04VAPT interview 0522 browser CLI labs

Lessons in the library

Only course-complete lessons. Pick a vendor chip, then read in path order.

Curated 2026-08-15

Start · How the exchange works

Zscaler · ZIA / ZPA · How it works

How the Zscaler exchange actually works: who is the user, how traffic arrived, which window (ZIA, ZPA, ZDX, Branch) touched the flow, then prove the app answered. Location vs user auth,…