An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However, this network segment cannot access the dedicated management interface due to the Security policy.
Without changing the existing access to the management interface, how can the engineer fulfill this request?

Question

An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However, this network segment cannot access the dedicated management interface due to the Security policy.

Without changing the existing access to the management interface, how can the engineer fulfill this request?

Miroslav Burzinskij · Accepted Answer

Enable HTTPS in an Interface Management profile on the subinterface.

Miroslav Burzinskij · Answer

Specify the subinterface as a management interface in Setup > Device > Interfaces.

Miroslav Burzinskij · Answer

Add the network segment's IP range to the Permitted IP Addresses list

Miroslav Burzinskij · Answer

Configure a service route for HTTP to use the subinterface

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 118 - PCNSE discussion

Suggested answer: B

0 comments