When do you need to configure the P1 interface?

Question

Options

• Awhenever you have an upstream proxy
• Bwhenever you want to enable the WSA proxy
• Cwhenever you intend to deploy the L4TM in blocking mode
• Dwhenever you have a separate management VLAN or subnetwork

• A
  5% (1)
• D
  95% (20)

Explanation

D is correct because the P1 interface on appliances like the Cisco WSA exists to separate proxy/data traffic from management traffic. When your management network lives on a dedicated VLAN or subnet, you must configure P1 to handle proxy (data plane) traffic independently - otherwise both planes compete on M1.

Why the distractors fail:

• A (upstream proxy): Upstream proxy configuration is a routing/policy setting, not tied to which physical interface is active. P1 isn't required just because traffic exits to another proxy.
• B (enabling the WSA proxy): The proxy service can run using only M1 (which handles both management and proxy traffic by default). P1 is optional unless you need traffic separation.
• C (L4TM blocking mode): The Layer 4 Traffic Monitor's blocking behavior is controlled by its own mode settings, not by P1 interface configuration.

Memory tip: Think "P1 = Physical separation." You only need P1 when management and data traffic must travel on physically (or logically) separate networks. If everything shares one network, M1 alone is sufficient.

No community discussion yet for this question.