nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #393

What does rule shadowing in Security policies do?

The correct answer is B. It indicates that a broader rule matching the criteria is configured above a more specific rule. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVXCA0 A shadow rule warning generally indicates a more broad rule matching the criteria is configured above a more specific rule.

Security Policy Management

Question

What does rule shadowing in Security policies do?

Options

  • AIt shows rules with the same Source Zones and Destination Zones.
  • BIt indicates that a broader rule matching the criteria is configured above a more specific rule.
  • CIt indicates rules with App-ID that are not configured as port-based.
  • DIt shows rules that are missing Security profile configurations.

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    84% (47)
  • C
    9% (5)
  • D
    2% (1)

Explanation

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVXCA0 A shadow rule warning generally indicates a more broad rule matching the criteria is configured above a more specific rule.

Topics

#rule shadowing#security policy#policy optimization#rule ordering

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NETSEC-ANALYST Practice