What must be configured to apply tags automatically to User-ID logs?
What must be configured to apply tags automatically to User-ID logs?
To apply tags automatically to User-ID logs, the log settings must be configured. The log settings in the device log settings tab have a dedicated section for User-ID logs, allowing for the appropriate handling and tagging of these specific logs. This setup is required to ensure that the tags are applied accurately and systematically to User-ID logs.
Depending on the type of log you want to use for tagging, create a log forwarding profile or configure the log settings to define how you want the firewall or Panorama to handle logs. For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile. For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-auto-tagging-to-automate-security-actions
Yes, should be C. User-ID log is management plane log, so its forwarding profile should be set up at "Device\Log settings".
On the 1/23/24 exam
C. Depending on the type of log you want to use for tagging, create a log forwarding profile or configure the log settings to define how you want the firewall or Panorama to handle logs. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-auto-tagging-to-automate-security-actions
C both mz101 and chrisy042 are correct!
C both mz101 and chrisy042 are correct!
For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile. For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings. Correct answer C https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-auto-tagging-to-automate-security-actionsa
I read the question again and it says apply tags to used ID logs. Log setting is correct answer
Correct answer is B Log Forwarding is required to forward the logs with tagging on.
There is no option for udser-id in log forwarding settings. Log settings (Device tab) has a User-ID section
C is correct