A PA-Series firewall with all licensable features is being installed. The customer's Security policy requires that users do not directly access websites. Instead, a security device must create the…

Question

Options

• ADeploy the transparent proxy with Web Cache Communications Protocol (WCCP).
• BDeploy the Next-Generation Firewalls as normal and install the User-ID agent.
• CDeploy the Advanced URL Filtering license and captive portal.
• DDeploy the explicit proxy with Kerberos authentication scheme.

• A
  5% (1)
• B
  11% (2)
• C
  11% (2)
• D
  74% (14)

Explanation

In this scenario, the customer requires that users do not directly access websites and that a security device (the firewall) manages the connection, while also ensuring that there is authentication back to the Active Directory (AD) servers for all sessions. The explicit proxy with Kerberos authentication is the best solution because: The explicit proxy allows the firewall to intercept user web traffic and manage the connections on behalf of users. Kerberos authentication ensures that the user's identity is validated against the Active Directory servers before the session is allowed, fulfilling the authentication requirement.

No community discussion yet for this question.