To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?
To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?
To ensure that a Security policy has the highest priority, an administrator should add the policy in the shared device group as a pre-rule. This is because the evaluation order starts with shared pre-rules, ensuring the policy is processed before any other rules in the device group hierarchy.
https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/device-groups/device-group-hierarchy
I guess this might be D https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/manage-device-groups/manage-the-rule-hierarchy#idfb9e2593-a7f1-4e0d-aab5-a2903d654c99 https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/device-groups/device-group-policies#id671977ca-1041-4605-8a80-fbc10f3f5d7b
This question was on the exam.. Nov 2023
D is right
D is correct
The answer is D, this would put the rule at the very top.
D is correct: the evaluation order starts with shared pre-rules, review the second link shared by @mercysayno765