PCNSC · Question #61
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair. Which NGFW receives the configuration from panorama?
The correct answer is C. both the active and passive firewalls independently, with no synchronization afterward. This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regar
Question
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair. Which NGFW receives the configuration from panorama?
Options
- Athe active firewall, which then synchronizes to the passive firewall
- Bthe passive firewall, which then synchronizes to the active firewall
- Cboth the active and passive firewalls independently, with no synchronization afterward
- Dboth the active and passive firewalls, which then synchronizes with each other
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C77% (24)
- D13% (4)
Explanation
This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regardless of if the config sync box is checked. Only local configuration will be synchronized if the config sync box is checked. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleOCAS
Topics
Community Discussion
No community discussion yet for this question.