Palo Alto Networks Certified Network Security Administrator (PCNSA)Palo Alto Networks Security PlatformMedium
A company is implementing a Palo Alto Networks firewall and desires to streamline security policy creation and enforcement. They want to ensure that security policies can be defined once and then applied consistently across all users accessing a particular application, regardless of their IP address or device. Which core technology within the Palo Alto Networks security platform enables this user-centric policy enforcement?
- AContent-ID
- BApp-ID
- CDevice-ID
- DUser-ID
Show answer & explanationAnswer & explanation
Correct answer: D. User-ID
User-ID maps user identities (from sources like Active Directory, LDAP, or RADIUS) to IP addresses, allowing security policies to be defined based on users and user groups rather than just IP addresses. This enables consistent policy enforcement regardless of where a user connects from.
Why the other options are wrong
- A. Content-ID inspects content for threats and sensitive data, not user identification.
- B. App-ID identifies applications, not users.
- C. Device-ID identifies device types, not user identities.
User-ID
A Palo Alto Networks technology that identifies users and user groups on the network by mapping IP addresses to user identities, enabling user-based security policies.
- Integrates with directory services (AD, LDAP).
- Allows granular policy based on user roles.
- Enhances visibility into user activity.
Memory trick: User-ID gives the firewall X-ray vision to see who is behind the IP address.