ExamGecko
Question list
Search
Search

Related questions











Question 356 - PCNSE discussion

Report
Export

An engineer troubleshoots a Panorama-managed firewall that is unable to reach the DNS servers configured via a global template. As a troubleshooting step, the engineer needs to configure a local DNS server in place of the template value.

Which two actions can be taken to ensure that only the specific firewall is affected during this process? (Choose two )

A.
Configure the DNS server locally on the firewall.
Answers
A.
Configure the DNS server locally on the firewall.
B.
Change the DNS server on the global template.
Answers
B.
Change the DNS server on the global template.
C.
Override the DNS server on the template stack.
Answers
C.
Override the DNS server on the template stack.
D.
Configure a service route for DNS on a different interface.
Answers
D.
Configure a service route for DNS on a different interface.
Suggested answer: A, C

Explanation:

To override a device and network setting applied by a template, you can either configure the setting locally on the firewall or override the setting on the template stack. Configuring the setting locally on the firewall will copy the setting to the local configuration of the device and will no longer be controlled by the template. Overriding the setting on the template stack will apply the setting to all the firewalls that are assigned to the template stack, unless the setting is also overridden locally on a firewall. Changing the setting on the global template will affect all the firewalls that inherit the setting from the template, which is not desirable in this scenario. Configuring a service route for DNS on a different interface will not change the DNS server address, but only the interface that the firewall uses to reach the DNS server.Reference:

Override a Template Setting

How to override panorama pushed template configuration on the local firewall

Overriding Panorama Template settings

asked 23/09/2024
Adrian Kustosz
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first