Panorama

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Panorama

hi can you tell me the right answer of this question please

 

Which level of abstraction allows definition of common policy across multiple next-generation firewalls (NGFWs) in Panorama?

  • A. Zones
  • B. Interfaces
  • C. Zone profiles
  • D. Security profiles
2 REPLIES 2

Cyber Elite
Cyber Elite

If there would be no answers in the list I would say "Device Groups".

None of provided answers are good match.

But if you need to choose then "D. Security profiles".

Security profiles are configured under Device Groups > Objects.

Other options are under Templates.

 

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

Cyber Elite
Cyber Elite

HI @Erdenebileg.Baasantogtokh ,

 

The answer by @Raido_Rattameister is correct.  Security profiles are in device groups and very easily implemented as a common configuration across all NGFWs.  The other 3 answers are in templates, but they also require NGFW specific information.  Zones require interfaces.  Interfaces require IP addresses.  Zone protection profiles require zones.

 

While not part of the question, to try to create a common template for zones, interfaces, or zone protection profiles would require configuration in the template stack to tie the NGFW specific config to each item.  For Network configuration, it's easier to have duplicates in the templates.  Perhaps that is why Panorama has a button to easily clone templates.

 

Thanks,

 

Tom

 

Help the community: Like helpful comments and mark solutions.
  • 976 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!