Palo Alto Configuraiton

 Palo Alto Firewall Configuration

1. Initial Setup
2. Cabling - Management, Console, HA, HA Backup
3. Management
4. DNS/NTP
5. License and Software updates
6. User Authentication
7. Interfaces/Zones
8. Routing
9. Policy UserID /App-ID /Content-ID /URL Filtering/DLP
10. NAT
11. SSL Encryption
12. HA Configuration

Integration wth SCM (Strata Cloud Manager) and (Strata Log Viewer)
GlobalProtect  VPN -
IPSec Tunnel - Site to Site

Troubleshooting Palo Alto Firewalls - PANOS

1. Tools and Resources
How to perform factory reset to Palo Alto Network Device
How to retrieve Firewall Configuration in maintenance mode
How to reset Administrator password 
How to SSH into Maintenance Mode
How to reinstall or revert PANOS from maintenance mode'
Restarting Management Server processes via CLI
How to generate and uploading a Tech Support file
How to restart a Web-related process.

2 Command line interface
Displaying and navigation command output
General system health commands
System and resources monitor commands
dropped packet troubleshooting commands
Routing debug commands
Test Security policy match command
Viewing and deleting Logs from CLI
IPSec Tunnel Troubleshooting commands 
Using CLI as a troubleshooting tool
Import, load and commit a configuration file
How to troubleshoot using counters via CLI 
TCPDUMP and debug data plane commands
How to create a management profile using CLI
CLI commands to show enable and disable application cache

3 Flow logic 
packet flow sequence in PANOS
Packet in slowpath, fastpath and offload
Debug packet flow
Open packet diagnostic file
Identify drop packet and the session end
Session state and type
Session tracker feature

4. Packet Capture
Packet capture concepts 
Packet capture stages
Manage filters
session offloading during packet capture
Configuring packet captures = CLI and WebUI

5, Packet Diagnostics logs
Examine firewall traffic logs and threat logs
configure the packet filter
check global counters
configure and run packet capture and flow basic
Interpret the flow basic log and pcaps

6. Transit Traffic
Troubleshooting transit traffic
session table and traffic logs
security policy and block from application 
Not-applicable, incomplete, insufficient Data in the Application Field
Why does some traffic report as aged-out in traffic log
Packets are dropped due to TCP reassembly
SYN-ACK issue with Asymmetric routing
Tip & Tricks - Session timeout
Troubleshooting slowness with traffic, management
Troubleshooting decreased throughput for SMB protocol
Block risky URL categories
Deny unknown applications
Turn on SSL decryption
Block untrusted and expired certificates

7. IPSec VPN Troubleshooting 
VPN Concept and configuration
Troubleshooting IPSec VPPN connectivity issues
Troubleshooting IKE phase 1
Troubleshooting IKE Phase 2 
Interpret VPN error Messages
Check Routing and security policy rules
Proxy IDs- route and policy Based VPNs
IPSec Tunnel is up but packet is getting dropped
Dead peer detection and Tunnel monitoring
IPSec with overlapping networks
How to enable debug in a single vpn peer

8. System Service
identify performance issue
system service daemons
check running service
restart a service
gather more data

9.Certificate Management and SSL Decryption Troubleshooting
Troubleshoot and monitor decryption
Decryption failures reasons
troubleshoot pinned certificates
Troubleshooting SSL certificates
Unsupported and failure checks
Remediating unsupported cipher suite
Forward trust and forward untrust certificates
Decryption logging

10. UserID
system logs verify and fix user mapping
verify LDAP connectivity
Fix LDAP server profile 
Troubleshooting UserID cache timeout
Useful CLI commands to troubleshoot LDAP connectivity

11. Global Protect
Trouble Global Protect
tools and utilities used for troubleshooting on client machines
tools used for troubleshooting on client machines
Tools used for troubleshooting on the firewall
Global Protect unable to connect to portal or gateway
Global Protect agents connected by unable to access resources
Useful Global protect gateway CLI commands
Server Certificate is invalid error message troubleshooting

12 Escalation and RMA

at boot up login prompt type  maint

Notes:

1. To restart the management server process (mgmtsrvr) on a Palo Alto Network Firewall, via CLI use the following Command:

> debug software restart process management-server

2. Resetting the firewall to factory defaults will result in the loss of all configuration settings and logs.  Set up a console connection to the firewall.  

• Connect a serial cable from your computer to the Console port and connect to the firewall using terminal emulation software (9600-8-N-1).  
• If your computer does not have a 9-pin serial port, use a USB-to-serial port connector.

Enter your login credentials.
Enter the following CLI command:
> debug system maintenance-mode

The firewall will reboot in the maintenance mode.

Reset the system to factory default settings.
When the firewall reboots, press Enter to continue to the maintenance mode menu.

• Select Factory Reset and press Enter.
• Select Factory Reset and press Enter again.

The firewall will reboot without any configuration settings. The default username and password to log in to the firewall is admin/admin.

To perform initial configuration on the firewall and to set up network connectivity, see Integrate NGFWs into you management network.