Which zone type allows traffic between zones in different virtual systems (VSYS), without the traffic leaving the firewall?

The correct answer is C. External. The External zone type is specifically designed for inter-VSYS traffic routing on a Palo Alto Networks firewall. When traffic needs to move from one VSYS to another VSYS on the same physical firewall, external zones provide the logical path that keeps traffic internal to the…

Virtual Systems Management

Question

Options

AIsolated
BTransient
CExternal
DInternal

How the community answered

(27 responses)

B
4% (1)
C
89% (24)
D
7% (2)

Explanation

The External zone type is specifically designed for inter-VSYS traffic routing on a Palo Alto Networks firewall. When traffic needs to move from one VSYS to another VSYS on the same physical firewall, external zones provide the logical path that keeps traffic internal to the device without requiring it to traverse an external network link. Each VSYS defines an external zone that references the peer VSYS, allowing security policy to be applied at the inter-VSYS boundary. 'Internal' (D) is not a valid PAN-OS zone type for this purpose. 'Isolated' (A) and 'Transient' (B) are not standard PAN-OS zone types; they are distractors. External zones are the PAN-OS mechanism that enables VSYS-to-VSYS communication within the same chassis.

Topics

#Virtual Systems (VSYS)#Zones#Inter-VSYS Communication#Network Configuration

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice