Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?

Question

Options

• ABoundary automation
• BHypervisor integration
• CBootstrapping
• DDynamic Address Group

• A
  7% (3)
• B
  2% (1)
• C
  16% (7)
• D
  75% (33)

Explanation

Dynamic Address Group is the PAN-OS feature that allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment. NSX is a software- defined network (SDN) solution that provides network virtualization, automation, and security for cloud-native applications. Dynamic Address Group is an object that represents a group of IP addresses based on criteria such as tags, regions, interfaces, or user-defined attributes. Dynamic Address Group allows Security policies to adapt dynamically to changes in the network topology or workload characteristics without requiring manual updates. When VM-Series firewalls are setup as part of an NSX deployment, they can leverage the NSX tags assigned to virtual machines (VMs) or containers by the NSX manager or controller to populate Dynamic Address Groups and update Security policies accordingly. Boundary automation, Hypervisor integration, and Bootstrapping are not PAN-OS features that allow for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment, but they are related concepts that can be used for other purposes.

No community discussion yet for this question.