PCNSE · Question #24
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after…
The correct answer is B. From the CLI, issue the show counter global filter packet-filter yes command. The correct CLI command to display global counters filtered to only traffic matching a configured packet filter is 'show counter global filter packet-filter yes'. Before running this command, an administrator would configure a packet filter under Monitor > Packet Capture (or…
Question
A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after configuring the appropriate packet filters?
Options
- AFrom the CLI, issue the show counter global filter pcap yes command.
- BFrom the CLI, issue the show counter global filter packet-filter yes command.
- CFrom the GUI, select show global counters under the monitor tab.
- DFrom the CLI, issue the show counter interface command for the ingress interface.
How the community answered
(35 responses)- A3% (1)
- B91% (32)
- C6% (2)
Explanation
The correct CLI command to display global counters filtered to only traffic matching a configured packet filter is 'show counter global filter packet-filter yes'. Before running this command, an administrator would configure a packet filter under Monitor > Packet Capture (or via CLI) to narrow the scope. Option A ('pcap yes') would capture raw packet data, not filter the counter display. Option C is incorrect because the GUI Monitor tab does not have a 'show global counters' menu item with packet-filter support. Option D ('show counter interface') shows interface-level statistics, not global counters tied to a packet filter.
Topics
Community Discussion
No community discussion yet for this question.