A prospective customer is interested in Palo Alto Networks NGFWs and wants to evaluate the ability to segregate its internal network into unique BGP environments. Which statement describes the…

Question

Options

• AIt cannot be addressed because PAN-OS does not support it.
• BIt can be addressed by creating multiple eBGP autonomous systems.
• CIt can be addressed with BGP confederations.
• DIt cannot be addressed because BGP must be fully meshed internally to work.

• A
  7% (2)
• B
  86% (24)
• C
  4% (1)
• D
  4% (1)

Explanation

Segregating a network into unique BGP environments requires the ability to configure separate eBGP autonomous systems (AS) within the NGFW. Palo Alto Networks firewalls support advanced BGP features, including the ability to create and manage multiple autonomous PAN-OS supports the configuration of multiple eBGP AS environments. By creating unique eBGP AS numbers for different parts of the network, traffic can be segregated and routed separately. This feature is commonly used in multi-tenant environments or networks requiring logical separation for administrative or policy reasons. Each eBGP AS can maintain its own routing policies, neighbors, and traffic segmentation. This approach allows the NGFW to address the customer's need for segregated internal BGP

No community discussion yet for this question.