Palo Alto Networks (PANW) System Engineer (PSE) Practice Exam

Which of the following is a valid CN-MGMT metric to auto scale CN-Series firewall?

1. mgmtplanecpuutilizationpct

2. panthroughput

3. panpacketrate

4. pandataplaneslots

The correct answer is: pandataplaneslots

The valid CN-MGMT metric for auto-scaling the CN-Series firewall is based on how the firewall's management plane resources are monitored and adjusted according to demand. The selected option, pandataplaneslots, is utilized to gauge the number of data plane slots in use, which provides insight into the utilization and capacity of the firewall's core data handling capabilities. When auto-scaling firewalls, it's crucial to observe metrics that indicate how the data planes are performing and whether they are nearing capacity. A valid metric in this context would actually be concerned with whether there are sufficient available resources to handle incoming traffic or processes. The other metrics, although significant in monitoring overall performance, relate primarily to the management plane or throughput rather than what is directly tied to data plane scalability, which is what pandataplaneslots is specifically designed to track. Monitoring the count of active data plane slots is an effective way to inform the auto-scaling mechanism about whether to add or remove instances of the firewall, ensuring efficient resource management and optimal performance during varying load conditions.