Ch 1.2 Next Generation Firewall Architecture.

Question 1

What is SP3?

Answer 1

Single-Pass Parallel Processing.

Question 2

How is Palo Alto different from traditional firewalls?

Answer 2

• It uses Packet inspection.
• A Library of application signature to distinguish between applications that have the same protocol and ports.
• Be able to identify potential malicious application that use non standard ports.

Question 3

Explain Single Pass.

Answer 3

• Traffic will pass on a single policy and get checked for:
• Antivirus Protection.
• Spyware protection.
• Data Filtering Protection.
• Vulnerability Protection.

Question 4

How many Planes does the Palo alto architecture have

Answer 4

• 2.
• Control Plane and Data Plane.

Question 5

What Is done in the Control Plane? and what interfaces are in the control plane?

Answer 5

• Management
• Configuration.
• Logging.
• Reporting.
• Management and Console interfaces.

Question 6

What is done in Control Plane?

Answer 6

• Signature Matching,
• Security Processing,
• Network Processing

Question 7

What Is done in the signature matching?

Answer 7

Stream-based uniform signature match including exploits, virus spyware.

Question 8

What is done in the Security Processing?

Answer 8

• App-ID
• URL Matching.
• Policy match.
• SSL/IPsec
• Decompression

Question 9

What is done in the Network Processing?

Answer 9

• Flow Control.
• MAC Lookup.
• Route Lookup.
• QoS.
• NAT.