A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?
To protect a sensitive application server against session floods originating from a single IP address, configuring a tuned DoS Protection Profile in the Palo Alto Networks Next-Generation Firewall (NGFW) is the most appropriate approach. This profile can be tailored to specifically detect and mitigate Denial-of-Service (DoS) attacks aimed at overwhelming the server's resources. It provides targeted protection against various types of session floods by setting threshold values and implementing specific policies to limit the impact of these attacks, ensuring that legitimate traffic can still reach the server while malicious traffic is filtered out.
correct D
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmTCAS
answr d
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules/dos-protection-profiles
D is correct
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and-policy-rules#:~:text=DoS%20Protection%20policy%20rules%20determine,help%20defend%20against%20DoS%20attacks.