An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take t

Question

Options

• AEnable and configure the Packet Buffer protection thresholds.
• BEnable and then configure Packet Buffer thresholds
• CCreate and Apply Zone Protection Profiles in all ingress zones.
• DConfigure and apply Zone Protection Profiles for all egress zones.
• EEnable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits.

• A
  88% (23)
• C
  8% (2)
• E
  4% (1)

Explanation

Packet Buffer Protection is a global, device-level feature in PAN-OS designed to guard against resource exhaustion by dropping or throttling traffic when packet buffer utilization exceeds defined thresholds. The configuration process has two steps: (1) Enable Packet Buffer Protection under Device > Setup > Session, and (2) configure the alert and activate threshold percentages. It is not applied via Zone Protection Profiles (which handle flood and reconnaissance protection at the zone level), and it is not a per-vsys session threshold setting. Applying Zone Protection Profiles to ingress or egress zones addresses different types of protection and is not required for Packet Buffer Protection.

No community discussion yet for this question.