156-815.71 · Question #121
Tom has been asked to add a rule that applies to only the perimeter firewalls and not the internal firewalls of all the customers managed by Multi-Domain Management with Provider-1. He sees that…
The correct answer is C. He can create a single rule in the global policy with a dynamic object with _global suffix in the Install. See the full explanation below for the reasoning.
Question
Tom has been asked to add a rule that applies to only the perimeter firewalls and not the internal firewalls of all the customers managed by Multi-Domain Management with Provider-1. He sees that there is one single global policy assigned to all the customers and feels very happy that he will have to just add one rule in that global policy and reassign and install the policy to all the customers at once. While doing so, he realizes that this action will also install the rule on the internal firewalls managed by the CMA's. He's afraid that he will now have to put the rule in each individual policy applied to perimeter gateways. Is he right or is there a better way?
Options
- AHe can create a single rule in the global policy with install on policy targets. While reassigning the
- BHe is right, there is no other way to do it.
- CHe can create a single rule in the global policy with a dynamic object with _global suffix in the Install
- DHe can create a single rule in the global policy and use the negate option in the Install On column to
How the community answered
(25 responses)- A8% (2)
- B4% (1)
- C84% (21)
- D4% (1)
Community Discussion
No community discussion yet for this question.