PCNSE · Question #757
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks…
The correct answer is B. SSL decryption exclusion D. Login banner E. Dynamic updates. A Panorama template named "Global" can standardize various firewall configurations across managed devices, including SSL decryption exclusions, login banners, and dynamic update settings.
Question
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks. Which three settings can be configured in this template? (Choose three.)
Options
- ALog Forwarding profile
- BSSL decryption exclusion
- CTags
- DLogin banner
- EDynamic updates
How the community answered
(64 responses)- A5% (3)
- B89% (57)
- C6% (4)
Why each option
A Panorama template named "Global" can standardize various firewall configurations across managed devices, including SSL decryption exclusions, login banners, and dynamic update settings.
While Log Forwarding Profiles can be defined in templates, they are typically applied through Log Forwarding policy rules, which might be specific to device groups rather than universally in a 'Global' template for *all* aspects.
SSL decryption exclusion policies are configured within templates to define traffic that should not be subject to SSL decryption, ensuring consistent policy application across managed firewalls.
Tags are metadata labels that can be defined in templates, but their application is typically within security policies, making them less of a direct 'setting' configured in a global template compared to B, D, and E.
A login banner is a global device setting that can be standardized across all managed firewalls by configuring it within a Panorama template.
Dynamic update settings, such as server, schedule, and actions for content, antivirus, and other updates, can be centrally managed and pushed via a Panorama template.
Concept tested: Panorama template configuration scope
Source: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-firewalls/templates-and-template-stacks/templates-and-template-stacks
Topics
Community Discussion
No community discussion yet for this question.