SSE-ENGINEER · Question #48
An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from
The correct answer is A. Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama. D. Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.. Ensuring that the Remote_Network_Template is selected when adding the User-ID Agent in Panorama is crucial because User-ID information must be associated with the correct Remote Network configuration for policies to apply properly. Additionally, the Service_Conn_Template must be
Question
An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user-based policies. Which two configurations need to be validated? (Choose two.)
Options
- AEnsure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.
- BConfirm there is a Security policy configured in Prisma Access to allow the communication on port
- CConfirm the Collector Pre-Shared Keys match between Prisma Access and the on-premises
- DEnsure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.
How the community answered
(65 responses)- A60% (39)
- B28% (18)
- C12% (8)
Explanation
Ensuring that the Remote_Network_Template is selected when adding the User-ID Agent in Panorama is crucial because User-ID information must be associated with the correct Remote Network configuration for policies to apply properly. Additionally, the Service_Conn_Template must be selected when adding the User-ID Agent in Panorama, as the service connection is responsible for distributing User-ID mappings between the on-premises firewall and Prisma Access. If either of these configurations is incorrect, the user information will not be properly mapped, and traffic will not match user-based policies.
Topics
Community Discussion
No community discussion yet for this question.