If a Palo Alto Networks Next-Generation Firewall (NGFW) already has Advanced Threat Prevention (ATP) enabled what is the throughput impact of also enabling Wildfire and Advanced URL Filtering (AURLF)?

Question

Options

• AThe throughput will decrease with each additional subscription enabled.
• BThe throughput will remain consistent, but the maximum number of simultaneous sessions will
• CThe throughput will remain consistent regardless of the additional subscriptions enabled.
• DThe throughput will decrease, but the maximum simultaneous sessions will remain consistent.

• A
  4% (2)
• B
  13% (7)
• C
  75% (39)
• D
  8% (4)

Explanation

Numerous integration approaches have come about, including unified threat management (UTM), deep packet inspection, and others. These approaches share a common problem, however: they lack consistent and predictable performance when security services are enabled. Specifically, the base firewall functions can perform at high throughput and low latency, but when added security functions are enabled, performance decreases while latency increases. More importantly, these traditional approaches to integration limit security capabilities because a "sequence of functions" approach is inherently less flexible than one in which all functions share information and enforcement mechanisms. Palo Alto Networks Single-Pass Architecture addresses these performance and flexibility challenges with a unique single-pass approach to packet processing, delivering better performance and security.

No community discussion yet for this question.