MENU
A customer is concerned about the administrative effort required to deploy over 200 VM- and CN-Series firewalls across multiple public and private clouds. The customer wants to integrate the deployment of these firewalls into the application-development process to ensure security at the speed of DevOps.
Which deployment option meets the requirements?
Comprehensive and Detailed In-Depth Step-by-Step Explanation:
Deploying and managing a large number of VM-Series and CN-Series firewalls across public (e.g., AWS, Azure, GCP) and private clouds requires automation to reduce administrative effort and integrate with DevOps processes. The Palo Alto Networks Systems Engineer Professional - Software Firewall documentation outlines strategies for scaling and automating firewall deployments to align with modern application development workflows.
Integration with automation and orchestration platforms (Option B): This option involves using tools like Ansible, Terraform, Kubernetes (for CN-Series), and other orchestration platforms to automate the deployment, configuration, and management of VM-Series and CN-Series firewalls. These platforms integrate with DevOps pipelines, enabling Infrastructure-as-Code (IaC) practices to deploy firewalls alongside applications, ensuring security is embedded in the development process. The documentation emphasizes automation platforms as the best approach for scaling deployments across multiple clouds, reducing manual effort, and achieving ''security at the speed of DevOps'' by aligning with CI/CD pipelines. This solution supports both VM-Series (via tools like Terraform and Ansible) and CN-Series (via Kubernetes), meeting the customer's multi-cloud and DevOps requirements.
Options A (Push configurations to all firewalls by using Panorama), C (Preconfigured Software Firewall Deployment Profiles), and D (Execution of Cloud NGFW bootstrapping) are incorrect. Pushing configurations via Panorama (Option A) provides centralized management but does not fully integrate with DevOps processes or automate deployment at scale for hundreds of firewalls across clouds---it's more suited for post-deployment management. Preconfigured Software Firewall Deployment Profiles (Option C) simplify initial setup but do not address ongoing automation or DevOps integration for large-scale deployments. Cloud NGFW bootstrapping (Option D) applies only to Cloud NGFW, not VM-Series or CN-Series, and does not meet the customer's need for a unified, automated solution across all firewall types and clouds.