Skip to Content

PCNSE: Comparing Explicit and Transparent Proxy Methods in PAN-OS 11.0

Learn about the benefits of using an explicit proxy method versus a transparent proxy method in Palo Alto Networks PAN-OS 11.0.

Table of Contents

Question

An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.

What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)

A. No client configuration is required for explicit proxy, which simplifies the deployment complexity.
B. Explicit proxy supports interception of traffic using non-standard HTTPS ports.
C. It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.
D. Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.

Answer

A. No client configuration is required for explicit proxy, which simplifies the deployment complexity.
C. It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.

Explanation

Two benefits of using an explicit proxy method versus a transparent proxy method are:

  1. No client configuration is required for explicit proxy, which simplifies the deployment complexity. With an explicit proxy, the client browser is aware of the proxy server and can configure itself to use it. This eliminates the need for manual configuration of each client device, making it easier to deploy and manage.
  2. Explicit proxy supports interception of traffic using non-standard HTTPS ports. An explicit proxy can intercept traffic on non-standard HTTPS ports, providing greater flexibility and control over the organization’s security policies.

Palo Alto Networks Certified Network Security Engineer PCNSE certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Palo Alto Networks Certified Network Security Engineer PCNSE exam and earn Palo Alto Networks Certified Network Security Engineer PCNSE certification.