Which authentication source requires the installation of Palo Alto Networks software, other than PAN-OS 7x, to obtain username-to-IP-address mapping?

Question

Options

• AAerohive Wireless Access Point
• BMicrosoft Terminal Services
• CPalo Alto Networks Captive Portal
• DMicrosoft Active Directory

• A
  4% (2)
• B
  87% (48)
• C
  2% (1)
• D
  7% (4)

Explanation

Explanation/Reference: Configure User Mapping for Terminal Server Users Individual terminal server users appear to have the same IP address and therefore an IP address to username mapping is not sufficient to identify a specific user. To enable identification of specific users on Windows-based terminal servers, the Palo Alto Networks Terminal Services agent (TS agent) allocates a port range to each user. It then notifies every connected firewall about the allocated port range, which allows the firewall to create an IP address-port-user mapping table and enable user- and group-based security policy enforcement. Incorrect Answers: A: If you want to integrate Aerohive with Palo Alto the suggested route is to run a script on a Kiwi Syslog Server which parses the Aerohive log and then updates the Palo Alto with Username/IP address mapping. A working VB script for Kiwi is provided below.

No community discussion yet for this question.