When configuring a physical interface on a Palo Alto Networks firewall, which IP-based service is only available if the interface is set to Layer 3 mode?

The correct answer is B. NetFlow export. NetFlow export requires the interface to operate in Layer 3 mode because it depends on IP routing and flow records derived from Layer 3 traffic, which are not available on interfaces configured as Layer 2, virtual wire, or other non–Layer 3 modes.

Network Interface Configuration and Features

Question

Options

ADDNS client
BNetFlow export
CQoS
DLink monitoring

How the community answered

(40 responses)

A
5% (2)
B
90% (36)
C
3% (1)
D
3% (1)

Explanation

NetFlow export requires the interface to operate in Layer 3 mode because it depends on IP routing and flow records derived from Layer 3 traffic, which are not available on interfaces configured as Layer 2, virtual wire, or other non–Layer 3 modes.

Topics

#Palo Alto Networks interfaces#Interface modes (L2/L3)#NetFlow/IPFIX#Network monitoring

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice