Course Outline

Introduction

  • Overview of Palo Alto Networks' next-generation firewalls

Using Tools and Resources

  • Basic troubleshooting methodologies
  • Options for information and support
  • Using status monitoring tools
  • Using maintenance mode

Understanding Flow Logic

  • Session flow and app-ID
  • Overview of flow logic
  • TCP sessions and states
  • Tracing packet flow

Packet Captures and Packet-Diagnostics Logs

  • Understanding packet capture concepts
  • Configuring packet captures
  • Using debug-level diagnostic log features
  • Interpreting the flow-basic output
  • Using hardware assistance and offloading

Host-Inbound and Transit Traffic

  • Troubleshooting transit traffic
  • Blocking tor
  • Troubleshooting host-inbound traffic

Using System Services

  • Identifying performance issues
  • Using baseline service performance
  • Performance troubleshooting use cases
  • Using system services daemons
  • Gathering more data

Certificate Management and SSL Decryption

  • Verify SSL decryption is applied via the certificate chain
  • Accessing the site via its IP vs FQDN
  • Intermediate CA missing
  • Excluding URLs / certificates
  • Using client authentication and SSL decryption exclusion
  • Working with external factors that complicate SSL decryption

User-ID

  • User-ID mapping flow
  • Troubleshooting User-ID

GlobalProtect

  • Using connection sequence
  • Troubleshooting GlobalProtect

Support Escalation and RMAs

  • Case management
  • Dealing with hardware failure and return merchandise authorizations (RMAs)
  • Managing escalation and support events

Summary and Next Steps

Requirements

  • Knowledge of network and security concepts

Audience

  • Security professionals
  • Cybersecurity analysts
  • Administrators
 21 Hours

Number of participants



Price per participant

Testimonials (1)

Related Courses

Cortex XDR

21 Hours

Palo Alto Networks Firewall Essentials: Configuration and Management

21 Hours

Palo Alto Firewalls

21 Hours

Panorama: Managing Firewalls at Scale

21 Hours

BeyondCorp: Implementing Zero Trust Security

14 Hours

Network Security

14 Hours

Network Security in Linux

14 Hours

Network Security Administrator

35 Hours

Software-Defined Wide Area Network (SD-WAN) and Security

7 Hours

Sophos XG Firewall Fundamentals

21 Hours

Wireless Network and Telecom Network Security

35 Hours

Zscaler

14 Hours

OpenVAS

14 Hours

Penetration Testing with Nmap

14 Hours

System and Network Security with FortiGate

21 Hours

Related Categories

1