PCNSC · Question #42
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)
The correct answer is B. SAML D. TACACS+ E. RADIUS. The administrative accounts are DEFINED on an external SAML, TACACS+, or RADIUS server. The server performs both authentication and authorization. For authorization, you define Vendor- Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML serv
Question
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)
Options
- APAP
- BSAML
- CLDAP
- DTACACS+
- ERADIUS
- FKerberos
How the community answered
(53 responses)- A8% (4)
- B87% (46)
- C4% (2)
- F2% (1)
Explanation
The administrative accounts are DEFINED on an external SAML, TACACS+, or RADIUS server. The server performs both authentication and authorization. For authorization, you define Vendor- Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML server. PAN-OS maps the attributes to administrator roles, access domains, user groups, and virtual systems that you define on the firewall. Kerberos, LDAP, and PAP required the admin account to be locally defined on the firewall.
Topics
Community Discussion
No community discussion yet for this question.