An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.
What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)
An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.
What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)
One benefit of using an explicit proxy method is that it supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request. This feature is important for tracking and logging user activity. Another benefit is that explicit proxy allows for easier troubleshooting, as the client browser is aware of the existence of the proxy, making it simpler to diagnose and resolve issues related to web traffic.
This question was on the exam.. Nov 2023
C and D are correct: Confirm C at https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-cloud-managed-admin/secure-mobile-users-with-prisma-access/explicit-proxy/explicit-proxy-how-it-works Confirm D at https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
That is my choice
Based on what? Please send some artilcle or document. This is not the correct way to express your opinion. :)
I think it's C and D. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
The PA DoC clearly says "There is no client configuration and Panorama is optional" & "Transparent proxy does not support X-Authenticated Users (XAU) "which clearly means that A&D is the correct one, https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
Correct for transparent proxy, but the question is asking for explicit proxy. CD
Hit too send too soon...A is absolutely not correct as explicit proxy does require client config.
I'm really sorry to say that you're wrong, my friend. As mlj23 already told you, thank you so much, mlj23! It's totally okay! We're all here reviewing our study together. It's always a good idea to double-check before posting, just to be sure!
C&D, It's easy.
CD absolutely. A and B isnt true... that would be transparent. C is true... it's in the documentation. D is also true because in it's nature an explicit proxy is "explicitly" defined on the users machine.
C and ad correct
This question was on the exam Mar/01/24
The following limitations apply for on-premises Explicit Proxy: - On-premises Explicit Proxy does not support multi-tenancy. - On-premises Explicit Proxy supports authentication using SAML and Kerberos. - On-premises Explicit Proxy requires decryption (TLS 1.3 is recommended). - On-premises Explicit Proxy requires port 8080. - On-premises Explicit Proxy requires PAC files to direct traffic to the on-premises Explicit Proxy. - On-premises Explicit Proxy supports customer-based hosting for their individual PAC files. - On-premises Explicit Proxy supports inbound proxy chaining with XFF and XAU HTTP headers. - On-premises Explicit Proxy supports HTTP/2 for Kerberos only; HTTP/2 for SAML is not supported in this release. From https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-release-notes/limitations/limitations-in-pan-os-11-0. This does not mention anything about Prisma or Prisma Access proxy limitations.
B & C is correct