PCNSA · Question #134
Starting with PAN-OS version 9.1, which new type of object is supported for use within the User field of a Security policy rule?
The correct answer is B. dynamic user group. PAN-OS version 9.1 introduced Dynamic User Groups (DUGs), which allow user groups in security policies to be populated automatically based on attributes fetched from external identity sources.
Question
Starting with PAN-OS version 9.1, which new type of object is supported for use within the User field of a Security policy rule?
Options
- Aremote username
- Bdynamic user group
- Cstatic user group
- Dlocal username
How the community answered
(25 responses)- A8% (2)
- B88% (22)
- C4% (1)
Why each option
PAN-OS version 9.1 introduced Dynamic User Groups (DUGs), which allow user groups in security policies to be populated automatically based on attributes fetched from external identity sources.
Remote usernames, referring to individual users identified via User-ID, were already supported in security policies prior to PAN-OS 9.1.
Starting with PAN-OS 9.1, Dynamic User Groups (DUGs) became supported, enabling user groups in security policies to be dynamically updated based on attributes from LDAP or other identity providers, enhancing automation and flexibility.
Static user groups, where users are manually added to predefined groups, were a feature available before the release of PAN-OS 9.1.
Local usernames, representing users defined directly on the firewall, were already available for use in security policies before PAN-OS 9.1.
Concept tested: PAN-OS 9.1 Dynamic User Groups
Source: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups
Topics
Community Discussion
No community discussion yet for this question.