Which two services are configured by applying an SSL/TLS service profile? (Choose two.)

The correct answer is A. Global Protect portal D. Syslog server monitoring. An SSL/TLS service profile defines the inbound TLS protocol versions and cipher suites used when the firewall acts as a server - i.e., when external clients initiate SSL/TLS connections to a service hosted on the firewall. The GlobalProtect portal (A) is a service running on…

Configure Firewall Management and Security Services

Question

Options

AGlobal Protect portal
BLog forwarding to Strata Logging Service
CForward-Trust certificate
DSyslog server monitoring

How the community answered

(34 responses)

A
91% (31)
B
3% (1)
C
6% (2)

Explanation

An SSL/TLS service profile defines the inbound TLS protocol versions and cipher suites used when the firewall acts as a server - i.e., when external clients initiate SSL/TLS connections to a service hosted on the firewall. The GlobalProtect portal (A) is a service running on the firewall that clients connect to, so it requires an SSL/TLS service profile to govern how that TLS session is established. Syslog server monitoring (D) using SSL/TLS transport also references an SSL/TLS service profile to define the TLS parameters for that encrypted connection. Log forwarding to Strata Logging Service (B) uses a dedicated Cortex Data Lake/Strata connection configuration, not an SSL/TLS service profile. The Forward-Trust certificate (C) is used in SSL/TLS decryption (outbound inspection) and is configured under certificate settings or a decryption profile, not an SSL/TLS service profile.

Topics

#SSL/TLS Service Profile#GlobalProtect#Firewall Management#Palo Alto Networks

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice