Explanation:
Active/Active High Availability (HA):
Active/Active HA enables both firewalls in an HA pair to process traffic simultaneously. This setup supports scenarios like asymmetric routing, where return traffic might not follow the same path. In such cases, both firewalls are aware of the session state.
Non-SYN First Packet:
This feature allows the firewall to handle and create sessions for non-SYN packets. In asymmetric routing, the first observed packet might not be a SYN packet because the SYN could have been processed by another firewall. Enabling this ensures session establishment and proper handling of such traffic.
Incorrect Options:
A. Multiple Virtual Systems:
This is used for segmentation and multi-tenancy, not for asymmetric routing.
D. Asymmetric Routing Profile:
There is no specific "asymmetric routing profile" feature in Palo Alto Networks firewalls. Instead, asymmetric routing is supported by configuring features like Active/Active HA and enabling non-SYN first packet processing.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
admripper
6 days, 12 hours agock19
7 months agoArangoTopics
1 year, 5 months agoArangoTopics
1 year, 5 months agoyet_another_user
1 year, 6 months agoyet_another_user
1 year, 6 months agomushi4ka
2 years, 2 months ago