A consultant deploys a PAN-OS 11.0 VM-Series firewall with the Web Proxy feature in Transparent Proxy mode. Which three elements must be in place before a transparent web proxy can function? (Choose…

Question

Options

• AUser-ID for the proxy zone
• BDNS Security license
• CPrisma Access explicit proxy license
• DCortex Data Lake license
• EAuthentication Policy Rule set to default-web-form

• A
  82% (28)
• D
  6% (2)
• E
  12% (4)

Explanation

Transparent Web Proxy in PAN-OS 11.0 requires User-ID (A), DNS Security license (B), and a Prisma Access explicit proxy license (C) - even in transparent mode, PAN Alto's Web Proxy feature is licensed through the Prisma Access proxy entitlement, and User-ID is mandatory so the firewall can attribute intercepted traffic to individual users in the proxy zone without an explicit client configuration. DNS Security is required because the transparent proxy must resolve and inspect hostnames as part of its interception workflow.

Why D is wrong: Cortex Data Lake is a cloud logging/storage service - it may be useful for telemetry but is not a prerequisite for the proxy to function. Why E is wrong: The default-web-form Authentication Policy Rule is an optional configuration used when you want browser-based user authentication challenges; it is not a hard dependency for enabling the transparent proxy itself.

Memory tip: Think "U-D-P" - User-ID (who is browsing), DNS Security (what they're resolving), Prisma proxy license (permission to run the feature). Cortex and auth-forms are "nice to have" add-ons, not prerequisites.

No community discussion yet for this question.