PCNSE · Question #125
A firewall architect is attempting to install a new Palo Alto Networks NGFW. The company has previously had issues moving all administrative functions onto a data plane interface to meet the design…
The correct answer is B. Validate that all upstream devices will allow and properly route the outbound traffic to the external. When administrative functions (licensing, updates) use a data plane interface, the firewall requires outbound connectivity to Palo Alto Networks servers (e.g., updates.paloaltonetworks.com) via that interface. If HTTPS/SSH work but licensing/updates fail, the issue is likely…
Question
A firewall architect is attempting to install a new Palo Alto Networks NGFW. The company has previously had issues moving all administrative functions onto a data plane interface to meet the design limitations of the environment. The architect is able to access the device for HTTPS and SSH; however, the NGFW can neither validate licensing nor get updates. Which action taken by the architect will resolve this issue?
Options
- ACreate a service route that sets the source interface to the data plane interface in question
- BValidate that all upstream devices will allow and properly route the outbound traffic to the external
- CCreate a loopback from the management interface to the data plane interface, then make a
- DEnable OCSP for the data plane interface so the firewall will create a certificate with the data
How the community answered
(47 responses)- A6% (3)
- B79% (37)
- C4% (2)
- D11% (5)
Explanation
When administrative functions (licensing, updates) use a data plane interface, the firewall requires outbound connectivity to Palo Alto Networks servers (e.g., updates.paloaltonetworks.com) via that interface. If HTTPS/SSH work but licensing/updates fail, the issue is likely upstream blocking or misrouting. Validating upstream devices (Option B) ensures ports (e.g., 443) and destinations are accessible, resolving the issue.
Topics
Community Discussion
No community discussion yet for this question.