Which statement is true about Panorama managed devices?

The correct answer is B. Local configuration locks prohibit Security policy changes for a Panorama managed device.. When a user has a configuration lock, it is not possible to perform a commit or push a policy from Panorama. If the administrator is not available to remove the lock, a device WebGUI or CLI command can be used by a superuser to force the removal of the configuration lock. https:/

Panorama Management

Question

Options

APanorama automatically removes local configuration locks after a commit from Panorama.
BLocal configuration locks prohibit Security policy changes for a Panorama managed device.
CSecurity policy rules configured on local firewalls always take precedence.
DLocal configuration locks can be manually unlocked from Panorama.

How the community answered

(49 responses)

A
6% (3)
B
82% (40)
C
10% (5)
D
2% (1)

Explanation

When a user has a configuration lock, it is not possible to perform a commit or push a policy from Panorama. If the administrator is not available to remove the lock, a device WebGUI or CLI command can be used by a superuser to force the removal of the configuration lock. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CltACAS

Topics

#Panorama#configuration locks#managed devices#policy management

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice