Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Master Device To configure policy rules and reports based on usernames and user groups, you must select a Master Device. >>This is the firewall from which Panorama receives usernames, user group names, and username-to-group mapping information.<<< When you change the Master Device or set it to None, Panorama loses all the user and group information received from that firewall.
In a Device-Group we need to select a Master Device. This is the firewall from which Panorama receives usernames, user group names, and username-to-group mapping information. In a Firewall we have option to pull AD Group info under Device > User Identification > Group mapping setting. But in a Panorama in 'User Identification' we don't have option for 'Group mapping setting'. Once User and Group information is retrieved on a Firewall from an LDAP server, we can pull same in Panorama by either using Template (for User-ID) or Device-Group (for username , Group etc.) Under Template stack - User-ID Master Device - Configure Panorama as a User-ID Master Device for mappings. Under Device group - Master Device- To configure policy rules and reports based on usernames and user groups, you must select a Master Device. This is the firewall from which Panorama receives usernames, user group names, and username-to-group mapping information.
It says "to retrieve groups from Panorama" so clearly panorama should act as user-id distributor for firewalls