Palo Alto Networks Firewall Troubleshooting Training Course

Introduction

• Overview of Palo Alto Networks' next-generation firewalls

Leveraging Tools and Resources

• Foundational troubleshooting methodologies
• Accessing information and support channels
• Utilizing status monitoring tools
• Implementing maintenance mode

Flow Logic Explained

• Session flow and application identification (app-ID)
• Concepts of flow logic
• TCP sessions and states
• Tracing packet flow

Packet Captures and Diagnostics

• Core concepts of packet capture
• Setting up packet captures
• Utilizing debug-level diagnostic logs
• Interpreting flow-basic output
• Leveraging hardware assistance and offloading

Host-Inbound and Transit Traffic

• Resolving transit traffic issues
• Blocking Tor traffic
• Troubleshooting host-inbound traffic

System Services Optimization

• Identifying performance bottlenecks
• Utilizing baseline service performance metrics
• Applying performance troubleshooting use cases
• Managing system service daemons
• Collecting additional diagnostic data

Certificate Management and SSL Decryption

• Validating SSL decryption via the certificate chain
• Accessing sites via IP address versus FQDN
• Addressing missing intermediate CAs
• Configuring URL and certificate exclusions
• Implementing client authentication and SSL decryption exclusions
• Navigating external factors impacting SSL decryption

User-ID

• User-ID mapping flow
• Troubleshooting User-ID issues

GlobalProtect

• Understanding connection sequences
• Troubleshooting GlobalProtect implementations

Support Escalation and RMAs

• Case management best practices
• Handling hardware failures and Return Merchandise Authorizations (RMAs)
• Managing escalation and support events

Summary and Next Steps