Palo Alto Networks NGFW にユーザー名とロール名の両方を提供するために変更できる 3 つのユーザー認証サービスはどれですか? (3 つ選択してください。)
正解:A,E,F
External service
The administrative accounts are defined on an external SAML, TACACS+, or RADIUS server.
The server performs both authentication and authorization. For authorization, you define Vendor- Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML server. PAN-OS maps the attributes to administrator roles, access domains, user groups, and virtual systems that you define on the firewall. For details, see:
Configure SAML Authentication
Configure TACACS+ Authentication
Configure RADIUS Authentication
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/firewall-administration/manage- firewall-administrators/administrative-authentication.html