An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunately, they required…

Question

Options

• ADownload and install application updates cannot be done automatically if the MGT port
• BConfigure a service route for Palo Alto Networks Services that uses a dataplane interface that
• CConfigure a Policy Based Forwarding policy rule for the update server IP address so that
• DConfigure a Security policy rule to allow all traffic to and from the update servers.

• A
  2% (1)
• B
  81% (43)
• C
  11% (6)
• D
  6% (3)

Explanation

Service routes allow firewall management-plane services (like content and application updates) to be redirected through a dataplane interface instead of the dedicated management (MGT) port. When MGT is isolated, configuring a service route for 'Palo Alto Networks Services' to use a dataplane interface that has Internet connectivity allows the firewall to reach Palo Alto update servers automatically. A Security policy rule alone does not reroute management-plane traffic; only service routes accomplish this.

No community discussion yet for this question.