A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN-OS® software would help in this case?

The correct answer is D. redistribution of user mappings. A large-scale network can also have numerous firewalls that use the mapping information to enforce policies. You can reduce the resources that the firewalls and information sources use in the querying process by configuring some firewalls to acquire mapping information through…

User-ID, Decryption, and Authentication

Question

Options

Acontent inspection
Bapplication override
CVirtual Wire mode
Dredistribution of user mappings

How the community answered

(23 responses)

A
9% (2)
B
13% (3)
C
4% (1)
D
74% (17)

Explanation

A large-scale network can also have numerous firewalls that use the mapping information to enforce policies. You can reduce the resources that the firewalls and information sources use in the querying process by configuring some firewalls to acquire mapping information through redistribution instead of direct querying. Redistribution also enables the firewalls to enforce user-based policies when users rely on local sources for authentication (such as regional directory services) but need access to remote services and applications (such as global data center applications). https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/user-id/deploy-user-id-in-a-large- scale-network.html#id73908ad1-63ee-440b-bb58-859ace1ce34d

Topics

#User-ID#user mapping redistribution#scalability#bottleneck

Community Discussion

No community discussion yet for this question.

Full PCNSC Practice