Palo_Alto_Networks
PCNSE · Question #409
An existing NGFW customer requires direct internet access offload locally at each site, and IPSec connectivity to all branches over public internet. One requirement is that no new SD-WAN hardware be i
The correct answer is B. Upgrade to a PAN-OS SD-WAN subscription. There are two SD-WAN options: - Pan-OS SD-WAN which requires a subscription and leverages existing firewalls - Cloudgenix SD-WAN which requires ION devices (hardware)
Submitted by katya_ua· Apr 18, 2026Plan
Question
An existing NGFW customer requires direct internet access offload locally at each site, and IPSec connectivity to all branches over public internet. One requirement is that no new SD-WAN hardware be introduced to the environment. What is the best solution for the customer?
Options
- AConfigure a remote network on PAN-OS
- BUpgrade to a PAN-OS SD-WAN subscription
- CConfigure policy-based forwarding
- DDeploy Prisma SD-WAN with Prisma Access
How the community answered
(17 responses)- A6% (1)
- B82% (14)
- C12% (2)
Explanation
There are two SD-WAN options: - Pan-OS SD-WAN which requires a subscription and leverages existing firewalls - Cloudgenix SD-WAN which requires ION devices (hardware)
Topics
#SD-WAN#Palo Alto NGFW#Branch Connectivity#Local Internet Breakout
Community Discussion
No community discussion yet for this question.