Which feature can provide NGFWs with User-ID mapping information?

The correct answer is C. GlobalProtect. GlobalProtect is a Palo Alto Networks VPN/endpoint solution that authenticates users before granting network access. When a user connects via GlobalProtect, the gateway receives the authenticated username along with the assigned IP address and forwards this IP-to-username…

Submitted by kwame.gh· Apr 18, 2026Core Concepts

Question

Options

AWeb Captcha
BNative 802.1q authentication
CGlobalProtect
DNative 802.1x authentication

How the community answered

(21 responses)

A
5% (1)
C
95% (20)

Explanation

GlobalProtect is a Palo Alto Networks VPN/endpoint solution that authenticates users before granting network access. When a user connects via GlobalProtect, the gateway receives the authenticated username along with the assigned IP address and forwards this IP-to-username mapping to the firewall's User-ID table. This enables identity-based policy enforcement. 802.1x is a port authentication standard that can map users to ports/VLANs at the switch level but does not natively provide User-ID data to Palo Alto NGFWs. Web Captcha is a challenge mechanism, not a User-ID source. 802.1q is VLAN tagging and has no authentication function.

Topics

#User-ID#GlobalProtect#Identity Mapping#NGFW Features

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice