Palo Alto Networks Firewall Troubleshooting Training Course

Course Introduction

• Overview of Palo Alto Networks’ next-generation firewall capabilities

Utilizing Diagnostic Tools and Support Resources

• Foundational troubleshooting methodologies
• Available information and support channels
• Implementation of status monitoring utilities
• Utilizing maintenance mode protocols

Comprehending Traffic Flow Logic

• Session flow and App-ID integration
• Conceptual overview of flow logic
• TCP session states and lifecycle
• Packet flow tracing procedures

Packet Capture and Diagnostic Log Analysis

• Core concepts of packet capture
• Configuring packet capture parameters
• Leveraging debug-level diagnostic log features
• Interpreting flow-basic output data
• Hardware-assisted processing and offloading

Managing Host-Inbound and Transit Traffic

• Diagnosing transit traffic issues
• Implementing Tor network blocking
• Troubleshooting host-inbound traffic patterns

System Service Administration and Analysis

• Identifying system performance anomalies
• Establishing baseline service performance metrics
• Performance troubleshooting use cases for government environments
• Managing system service daemons
• Data collection and aggregation strategies

Certificate Management and SSL Decryption

• Verifying SSL decryption application via certificate chain
• Differentiating site access via IP address vs. FQDN
• Addressing missing intermediate CA issues
• Excluding specific URLs or certificates
• Configuring client authentication and SSL decryption exclusions
• Mitigating external factors affecting SSL decryption for government

User Identification (User-ID) Services

• User-ID mapping workflows
• Troubleshooting User-ID integration

GlobalProtect Administration

• Analyzing connection sequences
• Troubleshooting GlobalProtect deployments

Support Escalation and Return Merchandise Authorizations (RMAs) for government

• Case management procedures
• Hardware failure management and RMA processes
• Managing support event escalations

Conclusion and Recommended Follow-up Actions