QuestionQ9

Routing Policy and Firewall Filters

Which three statements characterize a one-armed firewall deployment in a data center?

Choose three
  • A It requires at least two interfaces for ingress and egress.
  • B It may be virtualized or hardware based.
  • C It may be deployed in high availability mode.
  • D It requires that all traffic flows directly through the firewall.
  • E It requires a routing policy to determine which traffic passes through the firewall.
Explanation

A one-armed deployment sends selected traffic to and from the firewall through a single common interface, typically using policy-based redirection or routing policy. It can be implemented as either a virtual or hardware firewall and can use high availability. Palo Alto Networks documents one-arm mode as using a single interface for both ingress and egress, with policy-based redirect used to steer traffic to the firewall.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!