A is the correct https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKFCA0

there is no means to compress logs leaving the firewall AFAIK. Since all the data has to traverse the WAN link neither of the solutions will help reducing the log volume. I could imagine that they want to hear answer **A** though, but it rarely makes sense to me.

Based on documentation correct answer is A: Forward logs from firewalls to Panorama and from Panorama to external services—This configuration is best for deployments in which the connections between firewalls and external services have insufficient bandwidth to sustain the logging rate, which is often the case when the connections are remote. This configuration improves firewall performance by offloading some processing to Panorama. https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/log-forwarding-options

Answer A makes most sense to me.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKFCA0 https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/panorama-overview/centralized-logging-and-reporting/log-forwarding-options.html

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/log-forwarding-options

A is correct

Need to be A

Firewall logs -> Panorama -> Monitoring system

After reading the KB, I vote for option A.

Correct Answer: A Link: https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/log-forwarding-options PAN-OS: 10.2 Time of answer: May 30, 2022

It is A

A is correct

Answer: A

the correct answer is A. forwarding from Panorama reduces the number of log streams and cut down extra negotiation traffic per stream etc.

A is correct

A, 100%, look at the 2nd picture https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKFCA0