Which method will dynamically register tags on the Palo Alto Networks NGFW?

Question

Options

• ARestful API or the VMware API on the firewall or on the User-D agent or the ready -only domain
• BXML-API or the VMware API on the firewall on the User-ID agent or the CLI
• CRestful API or the VMware API on the firewall or on the User-ID Agent
• DXML-API or lite VM Monitoring agent on the NGFW or on the User-ID agent

• A
  4% (1)
• B
  9% (2)
• D
  87% (20)

Explanation

To mitigate the challenges of scale, lack of flexibility, and performance, network architectures today allow for virtual machines (VMs) and applications to be provisioned, changed, and deleted on demand. This agility, though, poses a challenge for security administrators because they have limited visibility into the IP addresses of the dynamically provisioned VMs and the plethora of applications that can be enabled on these virtual resources. Firewalls (hardware-based and VM- Series models) support the ability to register IP addresses, IP sets (IP ranges and subnets), and tags dynamically. The IP addresses and tags can be registered on the firewall directly or from Panorama. You can also automatically remove tags on the source and destination IP addresses included in a firewall log. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/monitor-changes-in-the- virtual-environment/use-dynamic-address-groups-in-policy

No community discussion yet for this question.