A network design change requires an existing firewall to start accessing Palo Alto Updates from a dataplane interface address instead of the management interface. Which configuration setting needs to

The correct answer is C. Service route. Explanation/Reference: The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks services such as software, URL updates, licenses and AutoFocus. An alternative to using the MGT

Device Management

Question

A network design change requires an existing firewall to start accessing Palo Alto Updates from a dataplane interface address instead of the management interface. Which configuration setting needs to be modified?

Options

AAuthentication profile
BDefault route
CService route
DManagement profile

How the community answered

(35 responses)

A
6% (2)
B
9% (3)
C
83% (29)
D
3% (1)

Explanation

Explanation/Reference: The firewall uses the management (MGT) interface by default to access external services, such as DNS servers, external authentication servers, Palo Alto Networks services such as software, URL updates, licenses and AutoFocus. An alternative to using the MGT interface is to configure a data port (a regular interface) to access these services. The path from the interface to the service on a server is known as a service route. The service packets exit the firewall on the port assigned for the external service and the server sends its response to the configured source interface and source IP address. You can configure service routes globally for the firewall or Customize Service Routes for a Virtual System on a firewall enabled for multiple virtual systems so that you have the flexibility to use interfaces associated with a virtual system.

Topics

#Service Routes#Dataplane interface#Management interface#Update server access

Community Discussion

No community discussion yet for this question.

Full PSE-PLATFORM Practice