Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

Question

Options

• AXML API
• BCaptive portal
• CUser-ID
• DSCP log ingestion

• A
  94% (34)
• B
  3% (1)
• D
  3% (1)

Explanation

Populating user-to-IP mappings is a critical function for enabling user-based policy enforcement in Palo Alto Networks firewalls. The following two methods are valid ways to populate these The XML API allows external systems to programmatically send user-to-IP mapping information to the firewall. This is a highly flexible method, particularly when user information is available from an external system that integrates via the API. This method is commonly used in environments where the mapping data is maintained in a centralized database or monitoring system. User-ID is a core feature of Palo Alto Networks firewalls that allows for the dynamic identification of users and their corresponding IP addresses. User-ID agents can pull this data from various sources, such as Active Directory, Syslog servers, and more. This is one of the most common and reliable methods to maintain user-to-IP mappings.

No community discussion yet for this question.