PSE-Software Firewall Professional PSE-SoftwareFirewall Full Course Free

Service Cluster Mode:

In NSX-T, the Service Cluster mode allows the VM-Series firewalls to be deployed as part of a service cluster, where they can provide security services to workloads.

Software next-generation firewall (NGFW) credits can be used to enable DNS security on Palo Alto Networks firewalls. These credits allow customers to activate DNS Security service, which provides real-time protection against DNS-based threats by leveraging machine learning and continuous analysis.

References:

Palo Alto Networks DNS Security: DNS Security

Palo Alto Networks Licensing Guide: Software NGFW Credits

Using the Heartbeat Backup:

The heartbeat backup is a mechanism that helps to prevent split-brain scenarios in a high availability (HA) configuration by providing an additional path for heartbeatcommunication. This ensures that both firewalls in the HA pair are aware of each other's status.

Data-plane vCPU Licensing:

The CN-Series firewalls are licensed based on the number of data-plane vCPUs. This licensing model reflects the processing power dedicated to handling traffic and security enforcement within the containerized environment.