PCNSE · Question #357
A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed each firewall must establish secure tunnels back to multiple regional…
The correct answer is C. GlobalProtect satellite. GlobalProtect Satellite is designed specifically for branch/remote sites that need to establish secure tunnels to multiple gateways (regional data centers) with minimal preconfiguration. A satellite device registers with the GlobalProtect portal, which automatically distributes…
Question
A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers. Which VPN preconfigured configuration would adapt to changes when deployed to the future site?
Options
- AIPsec tunnels using IKEv2
- BPPTP tunnels
- CGlobalProtect satellite
- DGlobalProtect client
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C79% (31)
- D10% (4)
Explanation
GlobalProtect Satellite is designed specifically for branch/remote sites that need to establish secure tunnels to multiple gateways (regional data centers) with minimal preconfiguration. A satellite device registers with the GlobalProtect portal, which automatically distributes gateway information - including newly added regional data centers - without requiring manual tunnel reconfiguration at each remote site. This makes it ideal for scaling to future sites. (A) IPsec with IKEv2 requires manual tunnel configuration per destination. (B) PPTP is outdated, insecure, and not a Palo Alto Networks solution. (D) GlobalProtect client is for end-user mobile devices, not site-to-site connectivity.
Topics
Community Discussion
No community discussion yet for this question.