Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

The correct answer is C. GlobalProtect. Because GlobalProtect users must authenticate to gain access to the network, the IP address-to- username mapping is explicitly known. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/user-id/user-id-concepts/user- mapping/globalprotect.html

Submitted by yousef_jo· Apr 18, 2026Plan

Question

Options

APAN-OS integrated User-ID agent
BLDAP Server Profile configuration
CGlobalProtect
DWindows-based User-ID agent

How the community answered

(41 responses)

A
5% (2)
B
2% (1)
C
78% (32)
D
15% (6)

Explanation

Because GlobalProtect users must authenticate to gain access to the network, the IP address-to- username mapping is explicitly known. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/user-id/user-id-concepts/user- mapping/globalprotect.html

Topics

#User-ID#GlobalProtect#Security Best Practices#IP-User Mapping

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice