Palo Alto Networks Certified Network Security Engineer (PCNSE)Manage and OperateHard
A large enterprise uses Panorama to manage hundreds of Palo Alto Networks firewalls globally. A new security compliance requirement mandates that all firewalls log sessions to a central syslog server, regardless of whether the traffic is allowed or denied. The syslog server configuration is identical for all firewalls. Which Panorama object should the administrator configure to efficiently push this syslog server setting to all managed devices, ensuring consistent logging behavior?
- ADevice Group
- BLog Forwarding Profile
- CTemplate Stack
- DLog Collector Group
Show answer & explanationAnswer & explanation
Correct answer: C. Template Stack
To push a consistent syslog server configuration to all managed firewalls, the syslog server settings themselves (under Device > Server Profiles > Syslog) must be defined in a Template. Templates are used for device-specific configurations that apply globally or to a group of devices. A Template Stack allows combining multiple templates for granular control and pushing to various device groups.
Why the other options are wrong
- A. Device Groups are used for pushing policy and object configurations (e.g., security rules, NAT rules), not device-level settings like syslog server profiles directly. Device groups are associated with Template Stacks.
- B. A Log Forwarding Profile defines *which* logs are sent and *where* (to a syslog server defined in a server profile), but it doesn't define the syslog server itself. It's applied within a policy, not a global device setting.
- D. Log Collector Groups are used for Panorama to collect logs from firewalls, not for firewalls to send logs to external syslog servers.
Panorama Templates
Panorama Templates are used to manage device-specific configurations (e.g., network settings, device settings, syslog servers) across multiple firewalls, ensuring consistency and simplified management.
- Manage device-level settings.
- Applied to firewalls directly or via Template Stacks.
- Override local firewall settings if configured.
Memory trick: Templates are like blueprints for device settings; Device Groups are where the blueprints are applied.