Exam PCNSE topic 1 question 157 discussion

SD-WAN supports a full mesh topology, in addition to the hub-spoke topology. The mesh can consist of branches with or without hubs. Use full mesh when the branches need to communicate with each other directly. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/sd-wan-features/sd-wan-full-mesh-vpn-cluster-with-ddns-service.html BC

B and C correct

BC https://docs.paloaltonetworks.com/sd-wan/3-0/sd-wan-admin/configure-sd-wan/create-a-vpn-cluster

https://docs.paloaltonetworks.com/sd-wan/3-0/sd-wan-admin/configure-sd-wan/create-full-mesh-vpn-cluster-with-ddns

https://docs.paloaltonetworks.com/plugins/vm-series-and-panorama-plugins-release-notes/panorama-plugin-for-sd-wan/sd-wan-plugin-200/features-introduced-in-sd-wan-2-0.html B&C - With 2.0.2 sd-wan plugin it supports full-mesh in addition to hub and spoke type

https://docs.paloaltonetworks.com/plugins/vm-series-and-panorama-plugins-release-notes/panorama-plugin-for-sd-wan/sd-wan-plugin-200/features-introduced-in-sd-wan-2-0.html With 2.0.2 plugin it supports full-mesh in addition to hub&spoke. So, the answer should be B&C

B & C are the most accurate answers, as per this doco https://www.paloguard.com/datasheets/sd-wan.pdf --> "Palo Alto Networks supports multiple SD-WAN deployment options, including mesh, hub-and-spoke, and cloud-based deployments."

I think the real question about this question is this referring to SD-Wan in general or PAN's version of it?

BC The CloudGenix SD-WAN supports both hub-and-spoke and limited scale full-mesh designs managed through a cloud-based portal. https://www.paloaltonetworks.nl/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/guides/pan-os-secure-sd-wan-deployment-guide

it is very tricky question, seems like PA does not support full-mesh and only support Hub&spoke topology, however I would say that or either question is wrong or we can consider going VPN clustering as full-mesh (logically) if not, just hub and spoke, C this doc said that full mesh is not supported: https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/configure-sd-wan/create-a-vpn-cluster.html and this said that p2p is supported https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/features-introduced-in-pan-os-9-1/sd-wan-features so I will go A and C

Correct ans: BC http://www.paloguard.com/datasheets/sd-wan.pdf

Correct: A,C Hub-and-Spoke is the default topology for PaloAlto SD-WAN Auto VPN Topology Creation - VPN clusters simplify the creation of complex VPN topologies using logical groupings of branches and hubs to accelerate the configuration and deployment of secure communications between all locations. (I guess this could be considered full-mesh but only in the logical sense.) https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-release-information/features-introduced-in-pan-os-9-1/sd-wan-features Full mesh is not supported in PAN-OS version 9.1.0 https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/configure-sd-wan/create-a-vpn-cluster.html

I think it is A and B Full Mesh SD-WAN VPN topology is not supported in PAN-OS 9.1.0. https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/configure-sd-wan/create-a-vpn-cluster.html