User ID | Palo Alto Firewall Training

You don’t have to filter traffic solely based on IPs and port numbers. One of the additional options you have is filtering based on the user!

The trick is to map users to the IP addresses of the devices they’re using. This might sound simple, but don’t forget that IPs change (DHCP), and users have multiple devices.

Palo Alto have several options for handling this, including agents, captive portal, Syslog parsing, global protect, and HTTP headers.

Once these have been configured, we can start using user or group information in our security policies.

https://docs.paloaltonetworks.com/pan...


Overview of this video:

0:00 Introduction

0:24 Users and NGFWs

1:51 Mapping Traffic to Users

8:19 Preparing for User-ID

11:35 Agent Configuration

14:02 Enable User-ID


Patreon information: https://networkdirection.net/patreon/


LET'S CONNECT

🌏    / networkdirection  

🌏   / netwrkdirection  

🌏   / networkdirection  

🌏 https://www.networkdirection.net

#NetworkDirection
#networking
#paloalto