Which function is handled by the management plane (control plane) of a Palo Alto Networks firewall?

Question

Options

• Asignature matching for content inspection
• BIPSec tunnel standup
• CQuality of Service
• Dlogging

• A
  2% (1)
• B
  2% (1)
• C
  5% (2)
• D
  90% (38)

Explanation

In PAN-OS architecture, the firewall is divided into two planes: the management plane (control plane) and the data plane (forwarding plane). The management plane is responsible for functions such as configuration management, routing protocol processing, system management, reporting, and logging. Logging is captured and processed by the management plane. The data plane handles high-speed, hardware-accelerated functions including signature matching for content inspection (Anti-Virus, IPS), Quality of Service (QoS) enforcement, NAT, and forwarding decisions. IPSec tunnel standup (specifically IKE phase 1 and phase 2 negotiation) is handled by the management plane, but the actual encrypted data forwarding goes through the data plane. Among the options, logging (option D) is the function definitively handled by the management plane.

No community discussion yet for this question.