Palo Alto Networks Certified Network Security Administrator (PCNSA)Monitoring and ReportingMedium
An organization relies on scheduled reports to provide daily summaries of critical security events to management. These reports are configured to be sent via email. Recently, management reported not receiving these daily emails. Which configuration profile should the administrator check first to troubleshoot the email delivery issue?
- ASyslog Server Profile
- BEmail Server Profile
- CLog Forwarding Profile
- DSNMP Trap Profile
Show answer & explanationAnswer & explanation
Correct answer: B. Email Server Profile
The Email Server Profile defines the SMTP server, sender address, and other parameters necessary for the firewall to send emails. If scheduled reports are not being received via email, the configuration of this profile is the most likely culprit for delivery issues.
Why the other options are wrong
- A. Syslog Server Profile is for forwarding logs to a Syslog server, not for sending emails.
- C. Log Forwarding Profile determines where logs are sent, but for email reports, it relies on the Email Server Profile for the actual sending mechanism.
- D. SNMP Trap Profile is for sending SNMP traps, not emails.
Email Server Profile
The Email Server Profile in Palo Alto Networks firewalls specifies the SMTP server details required for the firewall to send email notifications for reports, alerts, and other events.
- Configured under Device > Server Profiles > Email.
- Contains SMTP server address, port, sender email, and authentication details.
- Essential for any email-based notifications from the firewall.
Memory trick: For 'email' issues, check the 'Email Server Profile' first!