NGFW-Engineer PAN OS Networking Configuration Practice Question
A client is receiving a 'Gateway not reachable' error in GlobalProtect. What is a common troubleshooting step?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify security policies allow traffic to the gateway
Check if the portal/gateway IP is reachable via ping and if the correct security policies allow the GP traffic from the external zone.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increase the tunnel encryption level
Why it's wrong here
Encryption level doesn't affect initial gateway discovery.
- ✗
Check the local PC's DHCP settings
Why it's wrong here
Local DHCP does not affect GP portal reachability.
- ✓
Verify security policies allow traffic to the gateway
Why this is correct
GP traffic must be explicitly permitted.
- ✗
Clear the routing cache on the client
Why it's wrong here
This does not resolve firewall reachability.
About these practice questions
One of 190 original NGFW-Engineer practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NGFW-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NGFW-Engineer exam.