Get in Touch

Course Outline

Introduction

  • Overview of Palo Alto Networks' next-generation firewalls

Using Tools and Resources

  • Foundational troubleshooting methodologies
  • Options for information and support
  • Utilising status monitoring tools
  • Employing maintenance mode

Understanding Flow Logic

  • Session flow and App-ID
  • Overview of flow logic
  • TCP sessions and states
  • Tracing packet flow

Packet Captures and Packet-Diagnostics Logs

  • Understanding packet capture concepts
  • Configuring packet captures
  • Using debug-level diagnostic log features
  • Interpreting flow-basic output
  • Leveraging hardware assistance and offloading

Host-Inbound and Transit Traffic

  • Troubleshooting transit traffic
  • Blocking Tor
  • Troubleshooting host-inbound traffic

Using System Services

  • Identifying performance issues
  • Using baseline service performance
  • Performance troubleshooting use cases
  • Using system services daemons
  • Gathering additional data

Certificate Management and SSL Decryption

  • Verifying SSL decryption application via the certificate chain
  • Accessing sites via IP address versus FQDN
  • Addressing missing Intermediate CAs
  • Excluding URLs and certificates
  • Utilising client authentication and SSL decryption exclusion
  • Navigating external factors that complicate SSL decryption

User-ID

  • User-ID mapping flow
  • Troubleshooting User-ID

GlobalProtect

  • Using connection sequences
  • Troubleshooting GlobalProtect

Support Escalation and RMAs

  • Case management
  • Managing hardware failures and Return Merchandise Authorisations (RMAs)
  • Overseeing escalation and support events

Summary and Next Steps

Requirements

  • A working knowledge of network and security concepts

Audience

  • Security professionals
  • Cybersecurity analysts
  • Administrators
 21 Hours

Number of participants


Price per participant

Provisional Upcoming Courses (Require 5+ participants)

Related Categories