Which source is the most reliable for collecting User-ID user mapping?
Which source is the most reliable for collecting User-ID user mapping?
Microsoft Active Directory is the most reliable source for collecting User-ID user mapping. It is a widely-used directory service that provides a comprehensive and centralized platform for managing user information, authentication, and access control across a network. Other options like Microsoft Exchange, GlobalProtect, and Syslog Listener may provide user information, but they are not as comprehensive or reliable as Active Directory for overall user management and mapping.
Since it a Palo exam. I can see c being the answer. You have to login and the firewall monitors that log in. AD may half @$$ know about gp vpn or be slow to update with gp info
In GlobalProtect We Trust.
https://docs.paloaltonetworks.com/best-practices/10-1/user-id-best-practices/user-id-best-practices/user-id-best-practices-for-globalprotect
Answer is C
can I collect all network users using Captive Porta? wouldn't it be (A. Microsoft Active Directory.)
I agree. Global protect is the best. But It's dedicated to mobile/roaming users. What about on-premise user? They don't need clobal protect.