Get in Touch
 Duration 21 hours

Course Outline

Introduction

  • Overview of Palo Alto Networks' next-generation firewalls

Utilizing Tools and Resources

  • Basic troubleshooting methodologies
  • Options for information and support
  • Utilizing status monitoring tools
  • Using maintenance mode

Understanding Flow Logic

  • Session flow and app-ID
  • Overview of flow logic
  • TCP sessions and states
  • Tracing packet flow

Packet Captures and Packet-Diagnostics Logs

  • Concepts of packet capture
  • Configuring packet captures
  • Using debug-level diagnostic log features
  • Interpreting the flow-basic output
  • Utilizing hardware assistance and offloading

Host-Inbound and Transit Traffic

  • Troubleshooting transit traffic
  • Blocking Tor
  • Troubleshooting host-inbound traffic

Leveraging System Services

  • Identifying performance issues
  • Utilizing baseline service performance
  • Performance troubleshooting use cases
  • Using system services daemons
  • Gathering additional data

Certificate Management and SSL Decryption

  • Verifying SSL decryption via the certificate chain
  • Accessing sites via IP versus FQDN
  • Handling missing intermediate CAs
  • Excluding URLs or certificates
  • Using client authentication and SSL decryption exclusions
  • Managing external factors affecting SSL decryption

User-ID

  • User-ID mapping flow
  • Troubleshooting User-ID

GlobalProtect

  • Using connection sequences
  • Troubleshooting GlobalProtect

Support Escalation and RMAs

  • Case management
  • Managing hardware failures and Return Merchandise Authorizations (RMAs)
  • Managing escalation and support events

Summary and Next Steps

Requirements

  • Familiarity with network and security concepts

Audience

  • Security professionals
  • Cybersecurity analysts
  • Administrators

Number of participants


Price per participant

Upcoming Courses

Related Categories