The curriculum is structured around specific modules, teaching a proven methodology for tackling complex network scenarios:
Tools and Resources: An overview of the diagnostic tools and support resources available, including the Palo Alto Networks support portal and community, and an introduction to common diagnostic instruments.
CLI Primer: Detailed instruction on using CLI commands to investigate networking issues and perform advanced diagnostics.
Flow Logic: A comprehensive understanding of the sequential logic of how a packet is processed by the firewall, including routing decisions, security policies, and NAT rules.
Packet Captures: Learning to use and analyze the firewall's built-in packet capture capabilities to pinpoint connectivity issues and anomalies.
Packet-Diagnostics Logs: Interpreting detailed logs to identify the root cause of traffic failures and configuration mistakes.
Host-Inbound Traffic: Methodologies for debugging traffic destined for the firewall or protected internal hosts, including troubleshooting security policies and NAT translations.
Transit Traffic: Understanding how transit traffic is handled and troubleshooting issues related to routing, forwarding, and encapsulation.
System Services: Diagnosing common challenges with core system services like DNS resolution, NTP synchronization, and logging.
Certificate Management and SSL Decryption: Troubleshooting issues with certificate management and ensuring correct implementation and inspection of SSL-encrypted traffic.
User-ID: Methods for diagnosing and resolving authentication and user identification problems when integrating directory services.
Global Protect: Troubleshooting connectivity, authentication, and performance concerns related to the Global Protect remote access VPN solution.
Support Escalation and RMAs: Best practices for engaging with Palo Alto Networks for technical support and managing hardware replacement procedures (RMAs).
Target Audience and Prerequisites
Target Audience: Security engineers, administrators, security operations specialists, network engineers, and support staff.
Prerequisites: Participants must have completed the EDU-210: Firewall Essentials - Configuration and Management course or have equivalent practical experience. A strong practical knowledge of general networking concepts (routing, switching, IP addressing, TCP/IP) and at least six months of on-the-job experience with Palo Alto Networks firewalls are essential.
Completion of the EDU-330 course helps prepare candidates for the Palo Alto Networks Certified Network Security Engineer (PCNSE) certification exam.
