Palo Alto Networks NGFW Engineer — Question 75

Which method creates the most reliable user-to-IP mapping due to being based on a direct authentication from the user's device to the firewall?

Answer options

• A. Portal authentication
• B. PAN-OS XML API to push mappings
• C. Polling security event logs with a User-ID agent
• D. Authentication logs from Syslog receiver

Correct answer: A

Explanation

Portal authentication is the most reliable method as it directly verifies the user's identity from their device to the firewall, ensuring accurate user-to-IP mapping. The other options, such as using the PAN-OS XML API or polling security logs, do not provide real-time authentication and may result in outdated or inaccurate mappings.