PCNSA · Question #116
The Port Mapping user mapping method can monitor which two types of environments? (Choose two.)
The correct answer is A. Citrix B. Microsoft terminal servers. The Port Mapping user mapping method in Palo Alto Networks firewalls is specifically designed to identify users accessing resources through shared environments, such as Citrix and Microsoft terminal servers.
Question
The Port Mapping user mapping method can monitor which two types of environments? (Choose two.)
Options
- ACitrix
- BMicrosoft terminal servers
- CExchange Servers
- DLinux servers
How the community answered
(22 responses)- A86% (19)
- C9% (2)
- D5% (1)
Why each option
The Port Mapping user mapping method in Palo Alto Networks firewalls is specifically designed to identify users accessing resources through shared environments, such as Citrix and Microsoft terminal servers.
The Port Mapping user mapping method is highly effective in Citrix environments, allowing the firewall to differentiate individual users who share the same source IP address by monitoring their unique source port assignments.
Microsoft terminal servers (like Remote Desktop Services) present a shared IP challenge for user identification, and Port Mapping accurately maps distinct users to their respective sessions based on their allocated ports.
Exchange Servers are primarily email servers and do not typically function as shared user environments requiring a port-mapping method for user identification.
Linux servers, unless specifically configured as terminal servers, generally do not pose the shared IP user identification problem that the Port Mapping method is designed to solve.
Concept tested: User-ID Port Mapping for shared environments
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-mapping-for-terminal-services
Topics
Community Discussion
No community discussion yet for this question.