An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance.
Which interface type and license feature are necessary to meet the requirement?
An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance.
Which interface type and license feature are necessary to meet the requirement?
To export decrypted traffic from the Palo Alto Networks NGFW to a third-party deep-level packet inspection appliance, you need to use a Decryption Mirror interface in conjunction with the associated Decryption Port Mirror license. The Decryption Port Mirror license is essential for enabling the feature that allows copying decrypted traffic and sending it to a traffic collection tool for further inspection.
Correct: D ecryption port mirroring allows you to copy decrypted traffic from a firewall and then send it to a traffic collection tool, such as NetWitness or Solera. Decryption mirroring requires a Decryption Port Mirror license. This license is free of change and you can activate it through the customer support portal. https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-new-features/decryption-features/decryption_mirroring_support_extension#:~:text=Decryption%20port%20mirroring%20allows%20you,through%20the%20customer%20support%20portal.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-decryption-port-mirroring
D is correct, Note the decryption mirror interface only appear as an interface type when you install Decryption port mirror license. see step 4 of the configuration guide in the link below https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/configure-decryption-port-mirroring
D is right.
D is correct
D is correct - This feature enables creating a copy of decrypted traffic from a firewall and sending it to a traffic collection tool. To enable the feature, you must acquire and install the free license. Please refer to https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-interfaces/decrypt-mirror-interface