During an upgrade to the routing infrastructure in a customer environment, the network administrator wants to implement Advanced Routing Engine (ARE) on a Palo Alto Networks firewall. Which firewall models support this configuration?

The Advanced Routing Engine (ARE) was introduced in PAN-OS 11.0 and expanded in subsequent releases to provide a modernized routing stack based on the Free Range Routing (FRR) project. According to official Palo Alto Networks documentation, ARE is supported on the PA-400 Series, PA-1400 Series, PA-3400 Series, PA-5400 Series, PA-5450, PA-7000 Series (with specific SMCs), and the VM-Series firewalls. Option B lists models that belong to these supported families (PA-400 series, VM-Series, PA-1400 series, and PA-5450). Other options include legacy or specific models that explicitly do not support the Advanced Routing Engine, such as the PA-3200 Series, PA-5200 Series, PA-800 Series, and CN-Series firewalls, which continue to use the legacy routing engine.

A: The PA-5280 and PA-3250 do not support the Advanced Routing Engine; they rely on the legacy routing engine. C: The PA-3260 and PA-850 are older hardware platforms that do not support the Advanced Routing Engine. D: The CN-Series firewalls do not support the Advanced Routing Engine in the current PAN-OS releases.

1. Palo Alto Networks, "PAN-OS 11.0 Release Notes," Features Introduced in PAN-OS 11.0 > Advanced Routing Engine Support.

2. Palo Alto Networks, "PAN-OS 11.1 Administrator's Guide," Networking > Routing > Advanced Routing Engine.