Which statement accurately describes how web proxy is run on a firewall with multiple virtual systems?

Palo Alto Networks firewalls support the configuration of Explicit Proxy on a per-virtual system (vsys) basis. This architecture allows an administrator to enable and configure the web proxy service on a single virtual system if desired, or on multiple virtual systems independently. Each vsys can have its own unique explicit proxy configuration, including the proxy port number and security policies. This flexibility is a key design aspect of running services in a multi-vsys environment, allowing for tailored security and network configurations for different tenants or departments represented by each vsys.

B: This is partially true but less precise than option A. It omits the valid scenario of running the proxy on only a single vsys within a multi-vsys firewall. C: This is incorrect. The firewall is not limited to running explicit proxy on only one vsys; it can be enabled on multiple virtual systems simultaneously. D: This is incorrect. The functionality of the web proxy is not dependent on a specific alias name for the virtual system. Configuration is done through network settings.

1. Palo Alto Networks. (2023). PAN-OS® Administrator’s Guide 11.0 (Nova). "Configure Explicit Proxy". In the introductory section, it states, "If the firewall has multiple virtual systems (vsys), you can configure one explicit proxy on each vsys." This confirms that the feature can be deployed on a single vsys or on multiple vsys.