Which step must you complete to enable CPPM to process the Syslogs properly?

A company wants HPE Aruba Networking ClearPass Policy Manager (CPPM) to respond to Syslog messages from its Palo Alto Next Generation Firewall (NGFW) by quarantining clients involved in security incidents.

Which step must you complete to enable CPPM to process the Syslogs properly?
A . Configure the Palo Alto as a context server on CPPM.
B . Install a Palo Alto Extension through ClearPass Guest.
C . Enable Insight and ingress event processing on the CPPM server.
D . Configure CPPM to trust the root CA certificate for the NGFW.

View Answer

Answer: A

Explanation:

To enable HPE Aruba Networking ClearPass Policy Manager (CPPM) to process Syslog messages from a Palo Alto Next Generation Firewall (NGFW) and quarantine clients involved in security incidents, you need to configure the Palo Alto as a context server on CPPM. This setup allows CPPM to receive and understand the context of the Syslog messages sent by the Palo Alto NGFW, enabling it to take appropriate actions such as quarantining clients.