A.When creating the rule, ensure that web-browsing is added to the same rule. Both applications will be processed by the Security policy, allowing only Facebook to be accessed. Any other applications can be permitted in subsequent rules.

B.Create a subsequent rule which blocks all other traffic

C.No other configuration is required on the part of the administrator, since implicit application dependencies will be added automaticaly.

D.Ensure that the Service column is defined as "application-default" for this security rule.
This will automatically include the implicit web-browsing application dependency.

A.In the zone in which User Identification is enabled, select the "Restrict Allocated IP" checkbox.

B.Under the User Identification settings, under the User Mapping tab, select the "Restrict Users to Allocated IP"
checkbox.

C.In the DHCP settings on the Palo Alto Networks firewall, point the DHCP Relay to the IP address of the UserID
agent.

D.In the zone in which User Identification is enabled, create a User Identification ACL Include List using the same IP
ranges as those allocated in the DHCP scope.

A.Reset Client

B.Continue

C.Block

D.Reset Server

E.Override

F.Alert

A.Custom Signatures

B.Command & Control Signatures

C.App-ID Signatures

D.Correlation Events

E.Correlation Objects

A.50

B.500

C.1000

D.10