Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
To block Facebook chat while allowing Facebook in general, the security policy must be set to deny the 'facebook-chat' application before allowing the 'facebook' application. If the rule to deny 'facebook-chat' is placed before the rule allowing 'facebook', the specific chat functionality will be blocked first, and then general Facebook access will be permitted. By setting the policies in this order, the firewall processes the deny rule for Facebook chat first, effectively blocking it, and then processes the allow rule for Facebook, permitting access to the rest of Facebook's functionality.
A correct
Allowing Facebook will allow all its dependents including Facebook chat. therefore, you will need to block Facebook chat before the allow Facebook below it. A is the correct answer.
A >>>>Just tested on my LAB. Deny Face chat Allow Facebook and DNS
A is correct
correct
C. facebook-chat is dependent on facebook, and must be explicitly allowed. Therefore, permit facebook only, and facebook-chat will fall to the interzone default of deny.
if you allow facebook as a parent app then it will allow all sub apps incliding facebook chat. your answer and logic is incorrect. correct answer is A. you Deny the facebok chat, then allow all of facebook after.
A is correct
A is correct
The answer is D: PANW firewalls do application shifting so it can transition from Facebook-base to facebook-chat and allow everything facebook accept chat I tried it in my lab with rule order as in answer D: and everything works accept Facebook messenger I disabled the deny rule and messenger started working again Proof is in the pudding
But the answer D doesn't really mean allowing everything except chat, it simply says allow FB before denying chat( as far as I understand), meaning 2 separate rules.So if the traffic matches a certain rule the firwall will stop processing the traffic further so would it be able to identify facebook chat when the application shifts. I might be incorrect please help to clarify this. ( the answers might not have been properly worded here adding to the confusion).
A is correct
A is correct
A is the correct answer
before allow fb base