PCNSE · Question #102
A network design change requires an existing firewall to start accessing Palo Alto Updates from a dataplane interface address instead of the management interface. Which configuration setting needs to
The correct answer is C. Service route. Service Routes (Device > Setup > Services > Service Route Configuration) define which firewall interface is used to reach specific services such as Palo Alto Networks update servers, DNS, NTP, email, and others. By default, all these services use the management interface. To redi
Question
A network design change requires an existing firewall to start accessing Palo Alto Updates from a dataplane interface address instead of the management interface. Which configuration setting needs to be modified?
Options
- AAuthentication profile
- BDefault route
- CService route
- DManagement profile
How the community answered
(40 responses)- A8% (3)
- B3% (1)
- C88% (35)
- D3% (1)
Explanation
Service Routes (Device > Setup > Services > Service Route Configuration) define which firewall interface is used to reach specific services such as Palo Alto Networks update servers, DNS, NTP, email, and others. By default, all these services use the management interface. To redirect update traffic through a dataplane interface (e.g., ethernet1/1) instead, you change the service route for 'Palo Alto Networks Services' to point to that dataplane interface and specify the appropriate source IP. A management profile controls what management protocols are allowed on an interface, a default route affects general routing, and an authentication profile is used for user/admin authentication - none of these control which interface is used to reach update servers.
Topics
Community Discussion
No community discussion yet for this question.