What can an engineer use with GlobalProtect to assign user-specific client certificates to each GlobalProtect user?
What can an engineer use with GlobalProtect to assign user-specific client certificates to each GlobalProtect user?
An engineer can use Simple Certificate Enrollment Protocol (SCEP) with GlobalProtect to assign user-specific client certificates to each GlobalProtect user. SCEP facilitates the automated issuance and management of digital certificates, allowing for unique certificates to be assigned to individual users for authentication purposes.
https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-client-certificate-authentication/deploy-user-specific-client-certificates-for-authentication
Same question as Q326 https://www.examtopics.com/discussions/palo-alto-networks/view/81818-exam-pcnse-topic-1-question-326-discussion/
Correct answer is A
A SCEP
https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/authentication/set-up-client-certificate-authentication/deploy-user-specific-client-certificates-for-authentication
https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/authentication/set-up-client-certificate-authentication/deploy-user-specific-client-certificates-for-authentication To authenticate individual users, you must issue a unique client certificate to each GlobalProtect user and deploy the client certificate to the endpoints prior to enabling GlobalProtect. To automate the generation and deployment of user-specific client certificates, you can configure your GlobalProtect portal to act as a Simple Certificate Enrollment Protocol (SCEP) client to a SCEP server in your enterprise PKI.