The candidate should have a good understanding and extensive hands-on experience with various security technologies including Firewalls, VPNs, IDS/IPS, endpoint security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, and TACACS/AAA solutions. Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, and Application traffic control.