nerdexam
Palo_Alto_Networks

SSE-ENGINEER · Question #48

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from

The correct answer is A. Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama. D. Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.. Ensuring that the Remote_Network_Template is selected when adding the User-ID Agent in Panorama is crucial because User-ID information must be associated with the correct Remote Network configuration for policies to apply properly. Additionally, the Service_Conn_Template must be

Configure and Troubleshoot User-ID in Prisma Access

Question

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user-based policies. Which two configurations need to be validated? (Choose two.)

Options

  • AEnsure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.
  • BConfirm there is a Security policy configured in Prisma Access to allow the communication on port
  • CConfirm the Collector Pre-Shared Keys match between Prisma Access and the on-premises
  • DEnsure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.

How the community answered

(65 responses)
  • A
    60% (39)
  • B
    28% (18)
  • C
    12% (8)

Explanation

Ensuring that the Remote_Network_Template is selected when adding the User-ID Agent in Panorama is crucial because User-ID information must be associated with the correct Remote Network configuration for policies to apply properly. Additionally, the Service_Conn_Template must be selected when adding the User-ID Agent in Panorama, as the service connection is responsible for distributing User-ID mappings between the on-premises firewall and Prisma Access. If either of these configurations is incorrect, the user information will not be properly mapped, and traffic will not match user-based policies.

Topics

#User-ID redistribution#Panorama templates#service connection#pre-shared keys

Community Discussion

No community discussion yet for this question.

Full SSE-ENGINEER Practice