ExamGecko
Question list
Search
Search

Related questions











Question 246 - PCNSE discussion

Report
Export

An organization is interested in migrating from their existing web proxy architecture to the Web Proxy feature of their PAN-OS 11.0 firewalls. Currently. HTTP and SSL requests contain the c IP address of the web server and the client browser is redirected to the proxy Which PAN-OS proxy method should be configured to maintain this type of traffic flow?

A.
DNS proxy
Answers
A.
DNS proxy
B.
Explicit proxy
Answers
B.
Explicit proxy
C.
SSL forward proxy
Answers
C.
SSL forward proxy
D.
Transparent proxy
Answers
D.
Transparent proxy
Suggested answer: D

Explanation:

A transparent proxy is a type of web proxy that intercepts and redirects HTTP and HTTPS requestswithout requiring any configuration on the client browser1. The firewall acts as a gateway betweenthe client and the web server, and performs security checks on the traffic.

A transparent proxy can be configured on PAN-OS 11.0 firewalls by performing the following steps1:

Enable Web Proxy under Device > Setup > Services

Select Transparent Proxy as the Proxy Type

Configure a Service Route for Web Proxy

Configure SSL/TLS Service Profile for Web Proxy

Configure Security Policy Rules for Web Proxy Traffic

By configuring a transparent proxy on PAN-OS 11.0 firewalls, an organization can migrate from their existing web proxy architecture without changing their network topology or client settings2. The firewall will maintain the same type of traffic flow as before, where HTTP and HTTPS requests contain the IP address of the web server and the client browser is redirected to the proxy1.

Answer A is not correct because DNS proxy is a type of web proxy that intercepts DNS queries from clients and resolves them using an external DNS server3. This type of proxy does not redirect HTTP or

HTTPS requests to the firewall.

asked 23/09/2024
Samuel Ernesto
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first