Which statement about centralized firewall management systems is false?

• A. They automatically create ACLs from policies.
• B. They can manage ACLs centrally.
• C. They apply policies across devices.
• D. They do not support automatic ACL creation.

Answer: (D)

Centralized firewall management systems are built around policy-driven control: security policies are defined in a central console and translated into device-specific ACLs, which are then pushed out to multiple firewalls to enforce consistently. This is what allows an organization to maintain uniform access controls across the network without manually editing each device.

The statement that they do not support automatic ACL creation contradicts this core capability. In practice, these systems automatically generate ACLs from high-level policies, manage those ACLs in a central repository, and apply the resulting rules across the configured devices. This automation reduces configuration errors and ensures policy consistency. Some platforms may require minor device-specific tweaks or occasional manual updates for edge cases, but the default and widely supported behavior is automatic ACL generation and distribution.