PCNSE Exam QuestionsBrowse all questions from this exam

PCNSE Exam - Question 51


An administrator has users accessing network resources through Citrix XenApp 7.x.

Which User-ID mapping solution will map multiple users who are using Citrix to connect to the network and access resources?

Show Answer
Correct Answer: B

In environments where multiple users share the same IP address, such as when using Citrix XenApp, the Palo Alto Networks Terminal Services agent is required to map User-ID to each individual user. The Terminal Services agent assigns unique source ports to different users, thus allowing the mapping of multiple users to their respective processes. This solution is tailored for environments like Citrix where multiple users need to connect to the same network resources using a single IP address.

Discussion

16 comments
Sign in to comment
MelloOption: B
Oct 30, 2019

The correct answer may b B https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/user-id/map-ip-addresses-to-users

Edu147Option: B
Jul 24, 2019

Correct is B

tester12
Sep 17, 2019

Do you have the reference ?

NarendragptOption: B
Mar 27, 2021

B is correct - If you have clients running multi-user systems in a Windows environment, such as Microsoft Terminal Server or Citrix Metaframe Presentation Server or XenApp, Configure the Palo Alto Networks Terminal Server (TS) Agent for User Mapping.

[Removed]Option: B
Mar 31, 2023

B In environments with multi-user systems—such as Microsoft Terminal Server or Citrix environments—many users share the same IP address. In this case, the user-to-IP address mapping process requires knowledge of the source port of each client. To perform this type of mapping, you must install the Palo Alto Networks Terminal Server Agent on the Windows/Citrix terminal server itself to intermediate the assignment of source ports to the various user processes. For terminal servers that do not support the Terminal Server agent, such as Linux terminal servers, you can use the XML API to send user mapping information from login and logout events to UserID. See Configure User Mapping for Terminal Server Users for configuration details.

duckduckgooo
Apr 13, 2023

And here is the link. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/user-id/user-id-concepts/user-mapping/port-mapping

khalmrjOption: B
Feb 14, 2020

Correct is B

asmaamOption: B
Apr 4, 2020

Correct ans = B

KAAKOption: B
Jul 29, 2020

answer is B

DJNhunziOption: B
Nov 2, 2020

B is correct

RipuOption: B
Jun 12, 2020

Answer:B

tech_catarina_mallOption: B
Aug 28, 2020

Correct answer is B: Terminal Service Agent https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users.html

PacketFairy
Nov 20, 2020

Citrix is a terminal server. Each user is allocated a pool of source ports. Everybody logged in has the same IP so the only way to differentiate is by tcp/udp source port. This is what the terminal service agent does.

lol1000Option: B
Oct 29, 2020

b https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/user-id/map-ip-addresses-to-users.html

juangsapOption: B
Jun 16, 2022

B https://docs.paloaltonetworks.com/compatibility-matrix/terminal-services-ts-agent/terminal-services-ts-agent-table#id17CBA50079Z

JMIBOption: B
Aug 8, 2022

B is correct

omgt2k2Option: B
Jan 9, 2024

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/user-id/user-id-concepts/user-mapping/port-mapping

MarshpillowzOption: B
Jan 23, 2024

B is correct

bing2021Option: B
Jul 5, 2024

citrix, terminal agent