PCNSE · Question #582
PCNSE Question #582: Real Exam Question with Answer & Explanation
The correct answer is A: Add SSL application to the same rule.. In PAN-OS, when an application lists another application as a dependency, that dependent application must be explicitly added to the same security policy rule. Since GlobalProtect depends on SSL, SSL must be added to the rule for the dependency to be resolved. Web-browsing, howev
Question
A firewall engineer reviews the PAN-OS GlobalProtect application and sees that it implicitly uses web-browsing and depends on SSL. When creating a new rule, what is needed to allow the application to resolve dependencies?
Options
- AAdd SSL application to the same rule.
- BSSL and web-browsing must both be explicitly allowed.
- CAdd SSL and web-browsing applications to the same rule.
- DAdd web-browsing application to the same rule.
Explanation
In PAN-OS, when an application lists another application as a dependency, that dependent application must be explicitly added to the same security policy rule. Since GlobalProtect depends on SSL, SSL must be added to the rule for the dependency to be resolved. Web-browsing, however, is used implicitly by GlobalProtect - implicit use means PAN-OS automatically permits it when the parent application is allowed, so it does not need to be explicitly listed. Therefore, only SSL needs to be added (A), not web-browsing alone (D), nor both SSL and web-browsing together (C).
Topics
Community Discussion
No community discussion yet for this question.