Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementMedium
A network administrator needs to ensure that the Palo Alto Networks firewall's clock is accurately synchronized with a reliable time source. This is critical for accurate logging, certificate validation, and security policy enforcement. Which protocol should be configured on the firewall for this purpose?
- ANTP
- BSNMP
- CDNS
- DHTTP
Show answer & explanationAnswer & explanation
Correct answer: A. NTP
Network Time Protocol (NTP) is the standard protocol used to synchronize the clocks of computer systems over a network. Configuring NTP on the firewall ensures accurate time for logs, certificates, and policy enforcement.
Why the other options are wrong
- B. SNMP (Simple Network Management Protocol) is for network device monitoring and management, not time synchronization.
- C. DNS (Domain Name System) is for resolving domain names to IP addresses, not time synchronization.
- D. HTTP (Hypertext Transfer Protocol) is for web communication, not time synchronization.
NTP for Firewall Time Sync
The use of Network Time Protocol (NTP) on a Palo Alto Networks firewall to ensure accurate and synchronized system time.
- Crucial for log timestamps, certificate validity, and policy scheduling.
- Firewall can act as an NTP client.
- Configured under Device > Setup > Services > NTP.
Memory trick: To keep the firewall's clock in 'perfect time', you need NTP.