topic Which method of Phishing Credential Prevention? in Advanced Threat Prevention Discussions https://live.paloaltonetworks.com/t5/advanced-threat-prevention/which-method-of-phishing-credential-prevention/m-p/188001#M111 <P>We are currently using User-ID to map users to IP addresses.&nbsp; It seems that there are three possible methods of preventing credentials from leaving a site, but I am not clear on which method is best.&nbsp; What are other folks doing?&nbsp; One of the methods involves spinning up a RODC, which seems to be the most accurate of the three methods, but there is cost with that one if you don't have licensing to cover that server.&nbsp; It's also another server to keep patched, so there's an on-going cost with that method.</P><P>&nbsp;</P><P>We have the licensing to spin up a RODC server, but I'm not sure if the Pro's outweigh the Con's with that choice.&nbsp;&nbsp;</P><P>&nbsp;</P><P>I'm interested in hearing what methods other people have used to implemented this very useful feature.</P> Mon, 20 Nov 2017 16:48:32 GMT brucegarlock 2017-11-20T16:48:32Z Which method of Phishing Credential Prevention? https://live.paloaltonetworks.com/t5/advanced-threat-prevention/which-method-of-phishing-credential-prevention/m-p/188001#M111 <P>We are currently using User-ID to map users to IP addresses.&nbsp; It seems that there are three possible methods of preventing credentials from leaving a site, but I am not clear on which method is best.&nbsp; What are other folks doing?&nbsp; One of the methods involves spinning up a RODC, which seems to be the most accurate of the three methods, but there is cost with that one if you don't have licensing to cover that server.&nbsp; It's also another server to keep patched, so there's an on-going cost with that method.</P><P>&nbsp;</P><P>We have the licensing to spin up a RODC server, but I'm not sure if the Pro's outweigh the Con's with that choice.&nbsp;&nbsp;</P><P>&nbsp;</P><P>I'm interested in hearing what methods other people have used to implemented this very useful feature.</P> Mon, 20 Nov 2017 16:48:32 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/which-method-of-phishing-credential-prevention/m-p/188001#M111 brucegarlock 2017-11-20T16:48:32Z