Preferred method of contact:

(PA-311) Firewall: Debug and Troubleshoot



Course Number



3 Days

PDF Add to WishList

Firewall 8.0: Debug and Troubleshoot is the next-level course to Palo Alto Networks® Firewall 8.0 Essentials: Configuration and Management (EDU-210). The three-day, instructor-led Firewall 8.0: Debug and Troubleshoot course expands on the topics from the 210 course with hands-on troubleshooting labs:

  • Investigate networking issues using advanced firewall tools including the CLI
  • Analyze advanced logs to resolve various real-life scenarios
  • Solve advanced routing scenario challenges

You Will Learn How To

Successful completion of this three-day, instructor-led course will enhance the student’s understanding of how to troubleshoot the full line of Palo Alto Networks® nextgeneration firewalls. Students will receive hands-on experience troubleshooting the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks® PAN-OS® operating system. Upon completion of this class, students will have an indepth knowledge of how to troubleshoot visibility and control over applications, users, and content.

Important Course Information


  • Students must complete the Firewall 8.0: Essentials - Configuration and Management (210) course and have an understanding of network concepts, including routing, switching, and IP addressing. They also will need in-depth knowledge of port-based security and security technologies such as IPS, proxy, and content filtering.

Learning Tree Training Vouchers cannot be used to pay for the tuition fee for this course.

This course is delivered by a Learning Tree approved training partner.

Course Outline

  • Module 1:Troubleshooting Methodology
  • Know your network
  • Basic troubleshooting methodologies
  • Palo Alto Networks LIVEcommunity site:
    • Login required
    • Online tools
    • Working with the Palo Alto Networks support team
  • Module 2: Platform Comparisons When Troubleshooting
  • Terminology
  • Control plane and dataplane overview
  • Hardware platforms with architectures:
    • PA-200, PA-800, and PA-3000 Series
    • PA-5000 Series
    • PA-7000 Series
    • VM-Series
  • Module 3: Flow Logic
  • Single-Pass Architecture (SPA)/Single-Pass Parallel Processing (SP3)
  • Flow logic
  • Troubleshooting tools
  • Packet capture
  • Module 4: Administration Troubleshooting
  • Initial configurations:
    • MGT interface
    • Interface Management Profile
    • Firewall users and roles
    • Authentication profiles
  • RADIUS troubleshooting
  • LDAP troubleshooting
  • Maintenance mode
  • Module 5: Layer 3 Troubleshooting
  • Virtual routers
  • Dynamic routing
  • Troubleshooting potential network issues
  • Troubleshooting session issues
  • Module 6: Policy Troubleshooting
  • General policy issues
  • Decryption
  • Network Address Translation (NAT)
  • Application override
  • Policy-based forwarding (PBF)
  • App-ID
  • Module 7: User-ID™ Troubleshooting
  • Agent connection status
  • User-ID best practices
  • User-to-IP mapping
  • Authentication policy (Captive Portal)
  • Module 8: VPN Troubleshooting
  • Elements of VPN troubleshooting
  • Troubleshooting tunnel establishment
  • Troubleshooting VPN traffic flows
  • Module 9: GlobalProtect™ Troubleshooting
  • Troubleshooting tunnel failure on the firewall
  • Troubleshooting tunnel failure on the agent
  • Troubleshooting traffic failure on the firewall
  • Troubleshooting traffic failure on the agent
  • Module 10: Performance Troubleshooting
  • Potential management plane issues
  • Potential dataplane issues
  • Performance-related problems
Show complete outline
Show Less

Convenient Ways to Attend This Instructor-Led Course

Attend this live, instructor-led course In-Class or Online via WebEx.

In the Classroom

Private Team Training

In the Classroom

Tuition Fee — Standard: £2250  

5 - 7 Dec ( 3 Days)
9:00 AM - 5:00 PM GMT
London London Reserve Your Seat

Guaranteed to Run

When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time, location — will run. Guaranteed.

Private Team Training

Enroling at least 3 people in this course? Consider bringing this (or any course that can be custom designed) to your preferred location as a private team training.

For details, call 0800 282 353 or Click here »

This event has been added to your cart.

Tuition Fee


In Classroom or



Private Team Training

Contact Us »

Training Hours

Standard class hours:
9:00 a.m. - 5:00 p.m.

- ,

Chat Now

Please Choose a Language

Canada - English

Canada - Français