Discover how to reduce commit times for PA-220s in Panorama by disabling the “Share Unused Address and Service Objects with Devices” option, optimizing address and service object management for improved firewall performance.
Table of Contents
Question
A company has recently migrated their branch office’s PA-220s to a centralized Panorama. This Panorama manages a number of PA-7000 Series and PA-5200 Series devices. All device group and template configuration is managed solely within Panorama.
They notice that commit times have drastically increased for the PA-220s after the migration.
What can they do to reduce commit times?
A. Disable “Share Unused Address and Service Objects with Devices” in Panorama Settings.
B. Perform a device group push using the “merge with device candidate config” option.
C. Update the apps and threat version using device-deployment.
D. Use “export or push device config bundle” to ensure that the firewall is integrated with the Panorama config.
Answer
A. Disable “Share Unused Address and Service Objects with Devices” in Panorama Settings.
Explanation
Disabling the “Share Unused Address and Service Objects with Devices” option in Panorama Settings can help reduce commit times for the PA-220s. When this option is enabled, Panorama shares all address and service objects, including unused ones, with managed devices during commits, which can increase commit times, especially for smaller devices like the PA-220s. By disabling this option, only used address and service objects are shared, resulting in faster commit times.
Palo Alto Networks Certified Network Security Engineer PCNSE certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Palo Alto Networks Certified Network Security Engineer PCNSE exam and earn Palo Alto Networks Certified Network Security Engineer PCNSE certification.