Palo Alto Firewall Configuration, Management and Troubleshooting – PAN 10
About This Course
Designed to Reflect Real Life Challenges
This course gives networking professionals hands-on knowledge of how to troubleshoot a BIG-IP system using a number of troubleshooting techniques as well as troubleshooting and system tools. This course includes lectures, labs, and discussions
Audience:
This course assumes that you have successfully completed the Administering BIG-IP course, or equivalent, and have hands-on experience working in a production BIG-IP environment for several months. You should have a solid understanding of the environment in which the BIG-IP is deployed. This course is meant for BIG-IP administrators, network engineers, applications engineers, etc., who will be responsible for troubleshooting problems associated with their BIG-IP system
Prerequisite:
Students must have successfully completed the Administering BIG-IP course, or equivalent
Curriculum
INTRODUCTION
Introduction00:00:00
TS Ticket 01: Password Recovery – Forgotten both Root and Admin Password
TS Ticket 02: TCP Reset Causes – Adaptive Reaping and other causes
TS Ticket 03: Logging TCP Reset Packets – TM.RstCause.log
TS Ticket 04: Configuration Utility not Accessible – tomcat and httpd
TS Ticket 05: Troubleshooting Packet Drops – Ingress, Egress and TMM
TS Ticket 06: TCP RST after Client side SSL Handshake – SSL Bridging
TS Ticket 07: Restricting Access to BIGIP – Configuration utility and SSH
TS Ticket 08: Securing Access to BIGIP – Managing Network Access
TS Ticket 09: LDNS not reachable – Management interface routing
TS Ticket 10: SSL Certificates – CSR and Chain of Trust
TS Ticket 11: SSL Handshake – Handshake failures
TS Ticket 12: SSL Profiles – SSL offloading, SSL Bridging and SSL Pass through
TS Ticket 13: Generating CSR with SAN – Subject Alternative Name Certificates
TS Ticket 14: Renewing SSL Certificate – Renewing Certificates with new CSR
TS Ticket 15: Configuring Virtual server to host multiple HTTPS sites – SNI Extension
TS Ticket 16: Device Service Clustering – Detailed Explanation of DSC
TS Ticket 17: DSC Configuration – Configuration and Verification
TS Ticket 18: Troubleshooting ConfigSync and DSC – Step by step from CLI
TS Ticket 19: Software upgrades – HA Mode software upgrades step by step
TS Ticket 20: Unable to change initial admin password from GUI– First time access
TS Ticket 21: Automate Backups – Automating a Local UCS Archive CRONTAB
TS Ticket 22: QKview – Running QKview at Low Priority
# INTERVIEW QUESTIONS
Bonus Video 1 : TCP connection setup for BIG-IP LTM virtual server
Bonus Video 2 – Fall Back Host
Bonus Video 3 – iRule to Display Custom Error Message
Your Instructor
I am senior technical instructor and Network/ security consultant. I have been in the networking industry for more than 20 years, with a focus on networking and security for the past 15 years. I have assisted thousands of engineers in obtaining their various certifications starting from CCNA to CCIE, CCSA, CCSE, PCNSE, F5 BIGIP LTM , DNS (GTM) ASM ,Cisco SDWAN ,AWS Solutions Architect (Associate), AWS Cloud security , MS-Azure , SIEM , Cyber Security etc. and learning the latest and cutting-edge technologies. I started my career as a system administrator and then switched to the networking and security domain. During the job, I realized that I have been gifted with a passion for teaching and sharing my knowledge, as I used to teach my colleagues and friends. I have brought years of classroom and online teaching experience, and years of real-world enterprise and service provider experience in designing self-paced training courses.