Palo_Alto_NetworksPalo_Alto_Networks
PCNSE · Question #866
PCNSE Question #866: Real Exam Question with Answer & Explanation
The correct answer is B: Syslog. Palo Alto firewalls can gather User-ID mappings from proxies via Syslog (Option B), parsing log messages with user-IP data, and XFF Headers (Option D), extracting user info from HTTP headers (X- Forwarded-For) if the proxy supports it.
Submitted by diego_uy· Apr 18, 2026Deploy and Configure
Question
An engineer needs to collect User-ID mappings from the company's existing proxies. What two methods can be used to pull this data from third-party proxies? (Choose two)
Options
- AClient Probing
- BSyslog
- CServer Monitoring
- DXFF Headers
Explanation
Palo Alto firewalls can gather User-ID mappings from proxies via Syslog (Option B), parsing log messages with user-IP data, and XFF Headers (Option D), extracting user info from HTTP headers (X- Forwarded-For) if the proxy supports it.
Topics
#User-ID#Proxy Integration#Syslog#XFF Headers
Community Discussion
No community discussion yet for this question.