What is the main function of Policy Optimizer?

Question

Options

• Areduce load on the management plane by highlighting combinable security rules
• Bmigrate other firewall vendors' security rules to Palo Alto Networks configuration
• Celiminate "Log at Session Start" security rules
• Dconvert port-based security rules to application-based security rules

• A
  9% (6)
• B
  6% (4)
• C
  3% (2)
• D
  81% (52)

Explanation

Policy Optimizer provides a simple workflow to migrate your legacy Security policy rulebase to an App-ID-based rulebase, which improves your security by reducing the attack surface and offering visibility into applications so you can safely enable them. Policy Optimizer identifies port-based rules so you can convert them to application-based whitelist rules or add applications from a port- based rule to an existing application-based rule without compromising application availability. It also identifies over-provisioned App-ID-based rules (App-ID rules configured with unused applications). Policy Optimizer helps you prioritize which port-based rules to migrate first, identify application-based rules that allow applications you do not use, and analyze rule usage characteristics such as hit count.

No community discussion yet for this question.