Palo Alto Networks Firewall Troubleshooting Training Course

Introduction

• Overview of Palo Alto Networks' next-generation firewalls

Using Tools and Resources

• Basic troubleshooting methodologies
• Options for information and support
• Utilizing status monitoring tools
• Employing maintenance mode

Understanding Flow Logic

• Session flow and application identification (app-ID)
• Overview of flow logic
• TCP sessions and states
• Tracing packet flow

Packet Captures and Packet-Diagnostics Logs

• Understanding packet capture concepts
• Configuring packet captures
• Utilizing debug-level diagnostic log features
• Interpreting the flow-basic output
• Utilizing hardware assistance and offloading

Host-Inbound and Transit Traffic

• Troubleshooting transit traffic
• Blocking Tor traffic
• Troubleshooting host-inbound traffic

Using System Services

• Identifying performance issues
• Using baseline service performance metrics
• Performance troubleshooting use cases
• Using system service daemons
• Gathering additional data

Certificate Management and SSL Decryption

• Verifying SSL decryption application via the certificate chain
• Accessing sites via IP address versus Fully Qualified Domain Name (FQDN)
• Handling missing Intermediate CAs
• Excluding specific URLs or certificates
• Implementing client authentication and SSL decryption exclusions
• Managing external factors that complicate SSL decryption

User-ID

• User-ID mapping flow
• Troubleshooting User-ID

GlobalProtect

• Understanding connection sequences
• Troubleshooting GlobalProtect

Support Escalation and RMAs

• Case management processes
• Handling hardware failures and return merchandise authorizations (RMAs)
• Managing escalation and support events

Summary and Next Steps