You must configure which firewall feature to enable a data-plane interface to submit DNS queries on behalf of the control plane?

The correct answer is D. service route. By default, the firewall uses the management interface to communicate with various servers including those for External Dynamic Lists (EDLs), DNS, email, and Palo Alto Networks updates servers. The management interface also is used to communicate with Panorama. Service routes are

Firewall Configuration and Routing

Question

Exhibit

Options

Avirtual router
BAdmin Role profile
CDNS proxy
Dservice route

How the community answered

(46 responses)

A
4% (2)
B
9% (4)
C
2% (1)
D
85% (39)

Explanation

By default, the firewall uses the management interface to communicate with various servers including those for External Dynamic Lists (EDLs), DNS, email, and Palo Alto Networks updates servers. The management interface also is used to communicate with Panorama. Service routes are used so that the communication between the firewall and servers goes through the data ports on the data plane. These data ports require appropriate Security policy rules before external servers can be accessed.

Topics

#service route#DNS proxy#data plane#control plane communication

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice