A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Dump File but must not be able to reboot the device.
Where does the NetSec manager go to configure the new firewall administrator role profile?
For configuring a new firewall administrator role profile with the ability to download the TSF File and Start Dump File but without the privilege to reboot the device, the NetSec manager should navigate to Device > Admin Roles > Add > Web UI > Support. The 'Support' section allows for generating tech support files and stats dump files, whereas the 'Operations' section includes options to reboot the device, which is not desired for this role.
question said: must not be able to reboot the device. Answer is C
Checked again, answer is D.
Operations lets you reboot device etc Support lets you generate tech support file and stats dump file etc
Correct ans as verified in the PAN OS 10.2 configuration.
Following are the option under, Device -> Admin Roles -> Add -> Web UI -> Operations: 1. Reboot 2. Generate Tech Support File 3. Generate Status Dump File 4. Download Core Files 5. Download PCAP Files
Support -> TSF file Operations -> Reboot device
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-support
In the GUI it is Device > Support > Tech Support file / Stats Dump file
C. Device > Admin Roles > Add > Web UI > Support The NetSec manager can configure the new firewall administrator role profile by navigating to Device > Admin Roles, clicking Add, and then selecting the appropriate options under the Web UI tab
D. Device > Admin Roles > Add > Web UI > Operations. Options under Operations (PAN-OS 11.1): - Reboot - Generate Tech Support File - Generate Stats Dump File - Download Core Files - Download Pcap Files