NGFW EngineerDemo

By Palo Alto Networks · Question Mode

QuestionQ21

PAN-OS Networking Configuration

When deploying Palo Alto Networks NGFWs in a cloud service provider (CSP) environment, which approach ensures high availability (HA) across multiple availability zones?

  • A Deploying Ansible scripts for zone-specific scaling
  • B Implementing Terraform templates for redundancy within one availability zone
  • C Using load balancer and health probes
  • D Configuring active/active HA
Explanation

A load balancer distributes traffic across firewall instances, while health probes identify an unhealthy instance and remove it from service so traffic can continue through healthy instances in other availability zones. Palo Alto Networks documents that AWS Gateway Load Balancer uses health checks for backend security-processing instances and that Cloud NGFW remains operational in other availability zones if one zone fails.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!