PCNSE · Question #170
An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panorama?
The correct answer is D. Both the active and passive firewalls independently, with no synchronization afterward. This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regar
Question
An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panorama?
Options
- AThe Passive firewall, which then synchronizes to the active firewall
- BThe active firewall, which then synchronizes to the passive firewall
- CBoth the active and passive firewalls, which then synchronize with each other
- DBoth the active and passive firewalls independently, with no synchronization afterward
How the community answered
(26 responses)- A8% (2)
- C4% (1)
- D88% (23)
Explanation
This has some info for migrating HA into Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/transition- a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management Basically, Panorama configuration is not synced regardless of if the config sync box is checked. Only local configuration will be synchronized if the config sync box is checked.
Topics
Community Discussion
No community discussion yet for this question.