Palo_Alto_Networks
PSE-PLATFORM · Question #190
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can…
The correct answer is C. Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi-directional option. Explanation/Reference: https://live.paloaltonetworks.com/t5/Learning-Articles/What-does-the-Bi-directional-NAT-Feature-Provide/ta-p/60593
NAT
Question
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server. What can be done to simplify the NAT policy?
Options
- AConfigure ECMP to handle matching NAT traffic
- BConfigure a NAT Policy rule with Dynamic IP and Port
- CCreate a new Source NAT Policy rule that matches the existing traffic and enable the Bi-directional option
- DCreate a new Destination NAT Policy rule that marches the existing traffic and enable the Bi-directional option
How the community answered
(28 responses)- A4% (1)
- B7% (2)
- C71% (20)
- D18% (5)
Explanation
Explanation/Reference: https://live.paloaltonetworks.com/t5/Learning-Articles/What-does-the-Bi-directional-NAT-Feature-Provide/ta-p/60593
Topics
#NAT policy#bidirectional NAT#source NAT#destination NAT
Community Discussion
No community discussion yet for this question.