Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 420

A company has recently migrated their branch office’s PA-220s to a centralized Panorama. This Panorama manages a number of PA-7000 Series and PA-5200 Series devices. All device group and template configuration is managed solely within Panorama.

They notice that commit times have drastically increased for the PA-220s after the migration.

What can they do to reduce commit times?

Answer options

• A. Disable “Share Unused Address and Service Objects with Devices” in Panorama Settings.
• B. Perform a device group push using the “merge with device candidate config” option.
• C. Update the apps and threat version using device-deployment.
• D. Use “export or push device config bundle” to ensure that the firewall is integrated with the Panorama config.

Correct answer: A

Explanation

Disabling the 'Share Unused Address and Service Objects with Devices' option can reduce commit times by limiting the amount of information that needs to be processed during commits. The other options either do not specifically address commit time issues or are related to configuration updates rather than optimizing commit performance.