Palo Alto Networks NGFW-Engineer Exam - Topic 3 Question 30 Discussion

Question

An administrator is troubleshooting a newly configured site-to-site VPN between a PAN-OS firewall and a third-party policy-based VPN gateway. The tunnel allows traffic between the first pair of configured subnets, but traffic to a newly added remote subnet is failing. The administrator has confirmed that routing and Security policies are correct.

What is the most likely cause of this issue?

Melvin · Accepted Answer

C) The new local and remote subnets are missing from the Proxy ID configuration.

Melvin · Answer

A) A static route for the new subnet pointing to the tunnel interface is missing.

Melvin · Answer

B) The Security policy for the new subnet must be placed above the existing VPN policy.

Melvin · Answer

D) The tunnel's maximum transmission unit (MTU) size must be increased to accommodate the new traffic.