EDU-330 Firewall: Troubleshooting

Course Duration

3 Days

Audience

Employees of federal, state and local governments; and businesses working with the government.

Prerequisites

Participants must complete the Firewall Essentials: Configuration and Management (EDU-210) course prior to attending. Participants must also have strong practical knowledge of routing and switching, IP addressing, and network-security concepts, and at least six months of on-the-job experience with Palo Alto Networks firewalls.

Course Description

The Firewall Troubleshooting (EDU-330) course is a three-day, instructor-led training that teaches you how to systematically troubleshoot the full line of Palo Alto Networks next-generation firewalls. Using hands-on labs, you will gain practical skills diagnosing issues related to traffic flow, security policy, host-inbound services, system services, certificate management, SSL decryption, User-ID, and GlobalProtect. This course builds on EDU-210 and is a key component of preparation for the PCNSE certification exam.

Learning Objectives

• Use Palo Alto Networks troubleshooting tools and resources effectively
• Understand and trace firewall flow logic to identify traffic processing issues
• Capture and analyze packet captures on the firewall
• Interpret packet-diagnostics logs to identify root causes
• Troubleshoot host-inbound traffic and transit traffic issues
• Diagnose and resolve system services failures
• Troubleshoot certificate management and SSL/TLS decryption problems
• Diagnose User-ID mapping and policy enforcement issues
• Troubleshoot GlobalProtect VPN connectivity and authentication problems
• Properly document and escalate issues to Palo Alto Networks support

Course Outline

Course Modules

• Tools and Resources
• Flow Logic
• Packet Captures
• Packet-Diagnostics Logs
• Host-Inbound Traffic
• Transit Traffic
• System Services
• Certificate Management and SSL Decryption
• User-ID
• GlobalProtect
• Support Escalation and RMAs

Frequently Asked Questions