Palo Alto Networks Exam PSE-Strata-Pro-24 Topic 3 Question 1 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata-Pro-24 exam

Question #: 1
Topic #: 3

Which action can help alleviate a prospective customer's concerns about transitioning from a legacy firewall with port-based policies to a Palo Alto Networks NGFW with application-based policies?

ADiscuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.

BAssure the customer that the migration wizard will automatically convert port-based rules to application-based rules upon installation of the new NGFW.

CRecommend deploying a new NGFW firewall alongside the customer's existing port-based firewall until they are comfortable removing the port-based firewall.

DReassure the customer that the NGFW supports the continued use of port-based rules, as PAN-OS automatically translates these policies into application-based policies.

Show Suggested Answer

Suggested Answer: A

A . Discuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.

PAN-OS includes the Policy Optimizer tool, which helps migrate legacy port-based rules to application-based policies incrementally and safely. This tool identifies unused, redundant, or overly permissive rules and suggests optimized policies based on actual traffic patterns.

Why Other Options Are Incorrect

B: The migration wizard does not automatically convert port-based rules to application-based rules. Migration must be carefully planned and executed using tools like the Policy Optimizer.

C: Running two firewalls in parallel adds unnecessary complexity and is not a best practice for migration.

D: While port-based rules are supported, relying on them defeats the purpose of transitioning to application-based security.

Palo Alto Networks Policy Optimizer

by Celeste at Jan 26, 2025, 03:16 PM

Limited Time Offer

25%

16 days ago

Running two firewalls simultaneously? Talk about a power move! Option C is the way to go, let the customer take their sweet time.

upvoted 0 times

Niesha

6 days ago

That's a smart approach, giving the customer time to adjust.

upvoted 0 times

...

Merrilee

20 days ago

Automatic rule conversion? That's the dream! Definitely going with option B, it'll save everyone a lot of headaches.

upvoted 0 times

...

Chantell

22 days ago

I agree with Tiera, it would help the customer feel more at ease.

upvoted 0 times

...

Tiera

23 days ago

I think discussing the PAN-OS Policy Optimizer feature is a good idea.

upvoted 0 times

...

Benton

24 days ago

The PAN-OS Policy Optimizer feature sounds like the way to go. It'll make the transition a lot smoother and give the customer peace of mind.

upvoted 0 times

Tresa

2 days ago

D) Reassure the customer that the NGFW supports the continued use of port-based rules, as PAN-OS automatically translates these policies into application-based policies.

upvoted 0 times

...

Heike

7 days ago

A) Discuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.

upvoted 0 times

...