Skill UI

This skill guides the end-to-end deployment and configuration of Palo Alto Networks NGFWs. It covers advanced security features such as App-ID for application-aware policies, User-ID for identity-based enforcement, zone-based architecture, and Content-ID for deep threat inspection. Ideal for migrating legacy port-based firewalls to modern, identity-aware network security architectures.

This skill covers the technical process of setting up SSL/TLS inspection (decryption) on next-generation firewalls and proxies. It details how to act as a trusted Man-in-the-Middle to intercept, decrypt, and inspect encrypted HTTPS traffic for malicious payloads, data exfiltration, and policy violations. The workflow includes generating internal Certificate Authority (CA) certificates and deploying them across various operating systems (Windows, macOS, Linux) to ensure visibility into the web's encrypted blind spot.