Professional firewall & Zero Trust labs — in the browser
Train like production: real vendor workflows, CLI muscle memory, policy traces, and connector deploy labs. Each signed-in student gets a private workspace that saves and resumes across devices.
Featured labs
Start here — highest student use
Zscaler Policy & Connector Labs
URL/SSL policy tests, App · Branch · Cloud Connector deploy wizard, readiness scoring, and 30 guided CLI labs with dummy Techclick tenant data.
Launch lab →Palo Alto PAN-OS
Full WebUI-style practice — Policies, Objects, Network, Device — plus CLI with configure, commit, and show workflows for PCNSA/PCNSE prep.
Launch lab →Topology Lab Builder
Drag firewalls, PCs, and switches onto a canvas. Run multi-device scenarios (IPsec site-to-site, HA) with realistic mismatch diagnostics.
Open builder →PAN-OS Lab Workbook
20 investigation tasks across 5 levels — recon, log analysis, policy design, troubleshooting, and reporting. Self-paced and printable.
Open workbook →CLI consoles
Multi-vendor shell practice for certifications
Check Point Gaia CLI
clish + expert mode for interfaces, routes, ClusterXL, fw stat, cpinfo, and tcpdump-style practice.
Open CLI →FortiGate FortiOS CLI
Hierarchical config tree with context-aware prompts and full get / show / execute / diagnose coverage.
Open CLI →Juniper SRX Junos CLI
Operational and configuration modes with candidate config, commit, rollback, and show | compare.
Open CLI →Cisco ASA CLI
Multi-mode IOS-style shell — ACLs, objects, NAT, interfaces, and packet-tracer workflows.
Open CLI →SonicWall NSv CLI
Zones, address/service objects, access rules, NAT, and routes — pending until commit.
Open CLI →Cisco IOS Switch
VLANs, trunking, STP, EtherChannel, CDP, and port-security for CCNA fundamentals.
Open CLI →Cisco IOS Router
OSPF, BGP, NAT, ACL, static routes, and DHCP pools for CCNA / CCNP routing practice.
Open CLI →F5 BIG-IP TMSH
Virtuals, pools, nodes, monitors, and profiles with show / list / create / save sys config.
Open CLI →Policy & Zero Trust
GUI-style decision engines and NAC practice
Cisco ISE Policy Simulator
Build authentication and authorization policies, then trace RADIUS requests to the matching profile, VLAN, and dACL.
Open policy sim →Zscaler Connectors
App Connector, Branch Connector, and Cloud Connector — configure, deploy, and validate with dummy data and readiness checks.
Open connector labs →Forescout NAC
Asset inventory with classification, compliance state, and VLAN assignment. Click an endpoint to see policy match and remediation.
Open NAC sim →Utilities
Daily tools used in class and ops