Panorama Management and Logging Flashcards

Which log type in Panorama captures all connections allowed or denied by security policy?

Answer: Traffic Logs

Traffic Logs record all sessions that match security policy rules, showing source, destination, application, action (allow/deny), and bytes transferred.

In Panorama, what is the purpose of Log Forwarding Profiles?

Answer: To specify which logs are forwarded to external systems like Syslog or SIEM

Log Forwarding Profiles define criteria for forwarding specific log types to external destinations such as syslog servers, SNMP traps, or email alerts.

Which Panorama report type provides a summary of traffic patterns and top applications across all managed firewalls?

Answer: Application Usage and Risk Report

The Application Usage and Risk Report aggregates data from managed firewalls to show top applications, bandwidth consumption, and associated risk levels.

What Panorama feature allows an administrator to compare the running configuration of a managed firewall against the Panorama-pushed configuration?

Answer: Config Audit

Config Audit in Panorama highlights differences between configurations, helping identify unauthorized local changes or configuration drift on managed firewalls.

In Panorama, which administrator role has full read/write access to all managed devices and Panorama itself?

Answer: Superuser

The Superuser role in Panorama has unrestricted read/write access to all configurations, policies, templates, and managed devices.

How does Panorama handle log storage when a Log Collector's disk is full?

Answer: Oldest logs are overwritten in a circular buffer fashion

When a Log Collector reaches its storage limit, it overwrites the oldest log entries first, operating as a circular log buffer to ensure continuous logging.