Palo Alto Networks Firewall Troubleshooting Training Course

Introduction

• Overview of Palo Alto Networks' next-generation firewalls

Utilizing Tools and Resources

• Basic troubleshooting methodologies
• Options for accessing information and support
• Using status monitoring tools
• Utilizing maintenance mode

Understanding Flow Logic

• Session flow and application identification (App-ID)
• Overview of flow logic mechanisms
• TCP sessions and states
• Tracing packet flow

Packet Captures and Packet-Diagnostics Logs

• Understanding packet capture concepts
• Configuring packet captures
• Leveraging debug-level diagnostic log features
• Interpreting flow-basic output
• Using hardware assistance and offloading

Host-Inbound and Transit Traffic

• Troubleshooting transit traffic
• Blocking Tor traffic
• Troubleshooting host-inbound traffic

Leveraging System Services

• Identifying performance bottlenecks
• Utilizing baseline service performance metrics
• Applying performance troubleshooting use cases
• Managing system services daemons
• Gathering additional diagnostic data

Certificate Management and SSL Decryption

• Verifying SSL decryption application via the certificate chain
• Distinguishing between site access via IP address versus FQDN
• Addressing missing intermediate CA certificates
• Excluding specific URLs and certificates
• Implementing client authentication and SSL decryption exclusion
• Managing external factors that complicate SSL decryption

User-ID

• User-ID mapping flow
• Troubleshooting User-ID integration

GlobalProtect

• Analyzing the connection sequence
• Troubleshooting GlobalProtect connectivity

Support Escalation and RMAs

• Case management best practices
• Handling hardware failures and Return Merchandise Authorizations (RMAs)
• Managing escalation and support events

Summary and Next Steps