An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?
An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?
To configure and apply packet buffer protection on a Palo Alto Networks NGFW, an administrator must enable and configure the packet buffer protection thresholds and enable packet buffer protection per ingress zone. This ensures that resource exhaustion is adequately guarded by managing the packet buffer utilization specifically for incoming traffic zones.
Answer = A The following excerpts from 9.1 Docs confirm the answer: ... Packet Buffer Protection defends ingress zones. ... you don’t configure Packet Buffer Protection in a Zone Protection profile ... tune the Packet Buffer Protection thresholds https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection.html
A: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
A https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
https://live.paloaltonetworks.com/t5/%E5%85%AC%E5%85%B1%E5%B8%82%E5%A0%B4%E5%90%91%E3%81%91%E6%83%85%E5%A0%B1/%E6%98%A8%E4%BB%8A%E3%81%AEdos%E6%94%BB%E6%92%83%E3%81%AE%E5%82%BE%E5%90%91%E3%81%A8pa%E3%82%B7%E3%83%AA%E3%83%BC%E3%82%BA%E3%81%AEdos%E9%98%B2%E5%BE%A1%E6%A9%9F%E8%83%BD%E3%81%AE%E4%BD%BF%E3%81%84%E6%96%B9/ta-p/407688
correct a https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
Answer is A
Sounds like D to me : Same web link : Enable packet buffer protection on an ingress zone. Select Network Zones . Choose an ingress zone and click on its name. Select the Enable Packet Buffer Protection check box in the Zone Protection section. Click OK .
"A" is correct. you dont need a ZPF at all to have buffer protection enabled on a zone. and will be per zone on ingress as per life of a packet.