Which type of policy in Palo Alto Networks firewalls can use Device-ID as a match condition?
Which type of policy in Palo Alto Networks firewalls can use Device-ID as a match condition?
Device-ID in Palo Alto Networks firewalls allows administrators to create policy rules based on specific devices, regardless of changes to their IP address or location. This capability can be used in Security, Decryption, Quality of Service (QoS), and Authentication policies. Therefore, QoS, which stands for Quality of Service, is a type of policy that can use Device-ID as a match condition.
"C" - Correct Answer Similar to how User-ID provides user-based policy rules and App-ID provides app-based policy rules, Device-ID provides policy rules that are based on a device, regardless of changes to its IP address or location. By providing traceability for devices and associating network events with specific devices, Device-ID lets you gain context for how events relate to devices and adds policy rules that are associated with devices, instead of users, locations, or IP addresses, which can change over time. You can use Device-ID in Security, Decryption, Quality of Service (QoS), and Authentication policies.
C "You can use Device-ID in Security, Decryption, Quality of Service (QoS), and Authentication policies." https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/device-id/device-id-overview#id0ca11671-14f5-4020-98ff-40e894719a88
C - QoS
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/device-id/device-id-overview
C https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClspCAC