nerdexam
Palo_Alto_Networks

PCNSE7 · Question #139

The Network Security Administrator discovers that the company's NAT-aware SIP phone system is not working properly through the Palo Alto Networks firewall, even though SIP traffic is being allowed…

The correct answer is D. Disable ALG within the SIP application. See the full explanation below for the reasoning.

Question

The Network Security Administrator discovers that the company's NAT-aware SIP phone system is not working properly through the Palo Alto Networks firewall, even though SIP traffic is being allowed by policy. Which configuration change can resolve this issue?

Exhibit

PCNSE7 question #139 exhibit

Options

  • ADisable ALG within the security policy that permits SIP traffic
  • BCreate an application override policy to assign all traffic to and from SIP phones to the sip
  • CCreate a security policy that allows any traffic to and from SIP phones.
  • DDisable ALG within the SIP application

How the community answered

(19 responses)
  • A
    11% (2)
  • B
    5% (1)
  • D
    84% (16)

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice