topic Re: Dynamic TS-Agent Configuration in Automation/API Discussions

Dynamic TS-Agent Configuration

peter.hughes — Mon, 29 Jul 2013 16:26:19 GMT

We currently have 100+ Citrix Servers with more being added or removed every week. The TS-Agent is installed as part of the default Citrix Server build but it would be nice to have a slicker process to add new servers into the Panorama config. Presumably this is could be done using the API. Does anyone have any experience that they would like to share?

Thanks

Peter

Re: Dynamic TS-Agent Configuration

rds — Thu, 08 Aug 2013 10:29:01 GMT

We are also about to run into this problem as our Citrix guys are asking us to add 500 ts-agents on top of the 170 we already have configured. Is there a limitation on this for PANOS 4.1 and 5.0?

Re: Dynamic TS-Agent Configuration

dpenhall — Thu, 08 Aug 2013 20:23:52 GMT

There is a limitation of User-Agents based on the hardware. Max agents on the 5060 we run is a 1000 and goes down from there. There is a "show system ?" command and you run a match for "max" outputs a bunch of limits for your machine including the TSA agents. Haven't got the command handy to find but will try and remember to reply to this thread with it when I get into work.

Edit: show system state | match cfg.general.max-tsagents. I did notice on one of our PA-5060 running 4.1.12 the limit was 2000 ( pretty sure 4.0.x was only 1000 ). A PA-5060 running 5.0.6 in our environment is 1000.

Re: Dynamic TS-Agent Configuration

rds — Fri, 09 Aug 2013 10:26:59 GMT

Ran this command on 4020 and there doesn't seem to be any reference to "tsagents" anywhere?

Someone form PA came back to say the 5000 series max is 1000 all others max is 100.

With regards to adding multiple ts-agents it would be really nice if we could add a range of IP's instead of one at a time.

Re: Dynamic TS-Agent Configuration

torm — Mon, 25 Aug 2014 13:35:37 GMT

I'm currently working with a project where I'm running into the same issue. I need to add ts-agents to the Panorama configuration as a new servers are installed and remove/disable the agents when the servers are offline.

Have you figured out a good way to do this? I would really appreciate if anyone could share their experiences with this.

I suppose it would be possible to write a script using the API to do this.