A security engineer needs firewall management access on a trusted interface. Which three settings are required on an SSL/TLS Service Profile to provide secure
Web Ul authentication? (Choose three.)
A security engineer needs firewall management access on a trusted interface. Which three settings are required on an SSL/TLS Service Profile to provide secure
Web Ul authentication? (Choose three.)
To provide secure Web UI authentication for firewall management access on a trusted interface using an SSL/TLS Service Profile, three settings are essential: Encryption Algorithm, Maximum TLS version, and Minimum TLS version. The Encryption Algorithm is vital to ensure that the data transmitted between the client and server is securely encrypted. Defining the Maximum and Minimum TLS versions guarantees that the communication uses a secure protocol and remains compatible with the required security standards. These measures collectively ensure both the security and compatibility of the Web UI authentication process.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certificate-management/configure-an-ssltls-service-profile
CDE checked i a lab
On the exam, July 2023
CDE btw
C. Certificate D. Maximum TLS version E. Minimum TLS version
Select DeviceCertificate ManagementSSL/TLS Service Profile. If the firewall has more than one virtual system (vsys), select the Location (vsys or Shared) where the profile is available. Click Add and enter a Name to identify the profile. Select the Certificate you just obtained. Define the range of protocols that the service can use: For the Min Version, select the earliest allowed TLS version: TLSv1.0 (default), TLSv1.1, or TLSv1.2. For the Max Version, select the latest allowed TLS version: TLSv1.0, TLSv1.1, TLSv1.2, or Max (latest available version). The default is Max.