Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction
- Overview of Palo Alto Networks' next-generation firewalls
Utilizing Tools and Resources
- Basic troubleshooting methodologies
- Options for information and support
- Utilizing status monitoring tools
- Using maintenance mode
Understanding Flow Logic
- Session flow and app-ID
- Overview of flow logic
- TCP sessions and states
- Tracing packet flow
Packet Captures and Packet-Diagnostics Logs
- Concepts of packet capture
- Configuring packet captures
- Using debug-level diagnostic log features
- Interpreting the flow-basic output
- Utilizing hardware assistance and offloading
Host-Inbound and Transit Traffic
- Troubleshooting transit traffic
- Blocking Tor
- Troubleshooting host-inbound traffic
Leveraging System Services
- Identifying performance issues
- Utilizing baseline service performance
- Performance troubleshooting use cases
- Using system services daemons
- Gathering additional data
Certificate Management and SSL Decryption
- Verifying SSL decryption via the certificate chain
- Accessing sites via IP versus FQDN
- Handling missing intermediate CAs
- Excluding URLs or certificates
- Using client authentication and SSL decryption exclusions
- Managing external factors affecting SSL decryption
User-ID
- User-ID mapping flow
- Troubleshooting User-ID
GlobalProtect
- Using connection sequences
- Troubleshooting GlobalProtect
Support Escalation and RMAs
- Case management
- Managing hardware failures and Return Merchandise Authorizations (RMAs)
- Managing escalation and support events
Summary and Next Steps
Requirements
- Familiarity with network and security concepts
Audience
- Security professionals
- Cybersecurity analysts
- Administrators