Palo Alto Certifications and Accreditations PCNSE Paloalto Networks Study Notes

On the HQ firewall select peer IP address type FQDN

On the remote location firewall select peer IP address type Dynamic

On the HQ firewall enable DDNS under the interface used for the IPSec tunnel

On the remote location firewall enable DONS under the interface used for the IPSec tunnel

Use the Recommended profile for typical failover timer settings

Use the Moderate profile for typical failover timer settings

Use the Aggressive profile for slower failover timer settings.

Use the Critical profile for faster failover timer settings.

Source translation with Dynamic IP and Port

Destination translation with Static IP

Source translation with Static IP

Destination translation with Dynamic IP

Use the Scheduled Config Push to schedule Commit to Panorama and also Push to Devices.

Use the Scheduled Config Push to schedule Push to Devices and separately schedule an API call to commit all Panorama changes.

Use the Scheduled Config Export to schedule Push to Devices and separately schedule an API call to commit all Panorama changes

Use the Scheduled Config Export to schedule Commit to Panorama and also Push to Devices