Module 4 Managing Accounts

Question 1

What type of user accounts does PAN-OS software support?

Answer 1

LDAP, AD, Kerberos, RADIUS, TACACS+ and SAML

Question 2

What three types of authentication services are supported?

Answer 2

Local, external and multi-factor authentication

Question 3

How many local authentication services are there?

Answer 3

2: Local auth without a database and local authentication with a database.

Question 4

What is local authentication w/o a database?

Answer 4

Username and password stored on the firewall in the XML configuration file of the firewall.

Question 5

What is local authentication w a database?

Answer 5

Username and password stored on the firewall in a local user database. The firewall can use this service to authenticate logins to the firewall, and user traffic flowing through the firewall, like to webmail, where authentication is required. (Users connecting to local sources)

Question 6

Authentication Profile and Authentication Services - what is the difference?

Answer 6

You can configure each user individually on the firewall, with their own authentication profile…or you can configure all users to use the same authentication profile and authentication service (LDAP, RADIUS, TACACS+)

Question 7

Configure Authentication “Through the Firewall”

Answer 7

You can also configure the firewall to authenticate user credentials when uses attempt to access network resources THROUGH the firewall - like webmail.

Question 8

How many types of admin role profiles are there?

Answer 8

Two - dynamic admin role profiles are built in and have a predefined set of permissions

Question 9

How many dynamic admin roles

Answer 9

6: Superuser, Superuser (read-only), Device administrator, device administrator (read-only), Virtual Systems administrator and Virtual Systems administrator (read-only)

Question 10

What is the difference between all three admin roles?

Answer 10

Device administrator cannot create new accounts, or virtual systems. Virtual admins can only manage those virtual systems assigned to them. (Also virtual admins do not have access to firewalls network-level functions such as network interfaces, etc)

Question 11

How to create a Local (Non Database Admin Account

Answer 11

Device - admin

Question 12

How to create a local Database Authentication Profile

Answer 12

An authentication profile links in a username to the authentication service that the firewall must use to authenticate the users login credentials.