After a firewall is associated with Strata Cloud Manager (SCM), which two additional actions are required to enable management of the firewall from SCM? (Choose two.)

Question

Options

• ADeploy a service connection for each branch site and connect with SCM.
• BConfigure NTP and DNS servers for the firewall.
• CConfigure a Security policy allowing "stratacloudmanager.paloaltonetworks.com" for all users.
• DInstall a device certificate.

• A
  14% (3)
• B
  81% (17)
• C
  5% (1)

Explanation

To fully manage a firewall from Strata Cloud Manager (SCM), it's essential to establish trust and ensure reliable connectivity: Configure NTP and DNS servers The firewall must have accurate time (NTP) and name resolution (DNS) to securely communicate with SCM and related cloud services. To ensure successful management, configure the firewall's NTP and DNS settings to synchronize time and resolve domain names such as stratacloudmanager.paloaltonetworks.com. Install a device certificate A device certificate authenticates the firewall's identity when connecting to SCM. The device certificate authenticates the firewall to Palo Alto Networks cloud services, including SCM. It's a fundamental requirement to establish secure connectivity.

No community discussion yet for this question.