Palo Alto Networks Exam PSE-Strata-Pro-24 Topic 3 Question 1 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata-Pro-24 exam

Question #: 1
Topic #: 3

Which action can help alleviate a prospective customer's concerns about transitioning from a legacy firewall with port-based policies to a Palo Alto Networks NGFW with application-based policies?

ADiscuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.

BAssure the customer that the migration wizard will automatically convert port-based rules to application-based rules upon installation of the new NGFW.

CRecommend deploying a new NGFW firewall alongside the customer's existing port-based firewall until they are comfortable removing the port-based firewall.

DReassure the customer that the NGFW supports the continued use of port-based rules, as PAN-OS automatically translates these policies into application-based policies.

Show Suggested Answer

Suggested Answer: A

A . Discuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.

PAN-OS includes the Policy Optimizer tool, which helps migrate legacy port-based rules to application-based policies incrementally and safely. This tool identifies unused, redundant, or overly permissive rules and suggests optimized policies based on actual traffic patterns.

Why Other Options Are Incorrect

B: The migration wizard does not automatically convert port-based rules to application-based rules. Migration must be carefully planned and executed using tools like the Policy Optimizer.

C: Running two firewalls in parallel adds unnecessary complexity and is not a best practice for migration.

D: While port-based rules are supported, relying on them defeats the purpose of transitioning to application-based security.

Palo Alto Networks Policy Optimizer

by Celeste at Jan 26, 2025, 03:16 PM

Limited Time Offer

25%

Off

Get Premium PSE-Strata-Pro-24 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!