PCNSE · Question #340
Which two statements correctly identify the number of Decryption Broker security chains that are supported on a pair of decryption-forwarding interfaces? (Choose two)
The correct answer is A. A single transparent bridge security chain is supported per pair of interfaces D. A single transparent bridge security chain is supported per firewall. Decryption Broker functionality in transparent bridge mode has specific limitations regarding the number of security chains that can be configured for forwarding decrypted traffic.
Question
Which two statements correctly identify the number of Decryption Broker security chains that are supported on a pair of decryption-forwarding interfaces? (Choose two)
Options
- AA single transparent bridge security chain is supported per pair of interfaces
- BL3 security chains support up to 32 security chains
- CL3 security chains support up to 64 security chains
- DA single transparent bridge security chain is supported per firewall
How the community answered
(31 responses)- A94% (29)
- B3% (1)
- C3% (1)
Why each option
Decryption Broker functionality in transparent bridge mode has specific limitations regarding the number of security chains that can be configured for forwarding decrypted traffic.
For Decryption Broker operating in transparent bridge (Layer 2) mode, only a single security chain is supported for a specific pair of decryption-forwarding interfaces.
This statement pertains to Layer 3 security chains, which, while supporting up to 32 chains, is outside the scope of the question's implied focus on the limitations of transparent bridge (Layer 2) mode typically associated with an interface pair.
This statement incorrectly specifies the maximum number of Layer 3 security chains supported by Decryption Broker; the correct limit is 32, not 64.
Decryption Broker supports only a single transparent bridge (Layer 2) security chain across the entire firewall, irrespective of the number of available interface pairs, reflecting a global limit.
Concept tested: Palo Alto Networks Decryption Broker transparent bridge (L2) security chain limits
Source: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-broker/set-up-the-decryption-broker.html
Topics
Community Discussion
No community discussion yet for this question.