Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 303

A company with already deployed Palo Alto firewalls has purchased their first Panorama server. The security team has already configured all firewalls with the Panorama IP address and added all the firewall serial numbers in Panorama.

What are the next steps to migrate configuration from the firewalls to Panorama?

Answer options

• A. Export Named Configuration Snapshot on each firewall, followed by Impart Named Configuration Snapshot in Panorama.
• B. Use the Firewall Migration plugin to retrieve the configuration directly from the managed devices.
• C. Import Device Configuration to Panorama, followed by Export or Push Device Config Bundle.
• D. Use API calls to retrieve the configuration directly from the managed devices.

Correct answer: C

Explanation

The correct answer is C because importing the device configuration into Panorama allows for a centralized management setup, which is essential for managing multiple firewalls. Options A and B do not provide a direct method to migrate configurations as required, while D involves a more complex method that is not necessary for this scenario.