topic Re: Windows Server 2012 Terminal Server Agent in General Topics

Windows Server 2012 Terminal Server Agent

telxoid — Mon, 09 Dec 2013 22:20:38 GMT

So Server 2012 has been out over a year, and neither the standard User-ID agent or the Terminal Server Agent support it. Has anyone got a workaround (short of using 2008R2 server)?

Re: Windows Server 2012 Terminal Server Agent

indup089 — Tue, 10 Dec 2013 09:43:02 GMT

Hi,

User-ID agent can be installed on 2012 without problems and is running fine but without support from PANW. TS-Agent on 2012 is also not yet supported at this time and harder to install, you have to use the windows compatibility mode for a successful installation. I have several running requests with our local PANW SEs regarding Win 2012 support for the Agents, until now without any concrete response. I guess support will (and must) be availble in the 6.0 agents which is beta at this time but unfortunately without available beta release notes...

Re: Windows Server 2012 Terminal Server Agent

kadak — Tue, 10 Dec 2013 17:13:32 GMT

Hello,

As TAC support for UID agent running on Windows 2012 is not available, you can adopt the agentless approach for user-identification. In that way, you can avoid the use of UID agent itself.

Configuration for Agentless UID setup:

How to Configure Agentless User-ID in PAN-OS 5.0.x

Also for Terminal Server agent on Windows 2012, I do see a feature request (FR ID : 3062) submitted to our content development team. You too can request your account's SE to vote for it.

Thanks and regards,

Kunal Adak

Re: Windows Server 2012 Terminal Server Agent

Jeroen.Scheerder — Fri, 07 Apr 2017 09:33:56 GMT

The TS Agent used to run fine on Windows Server 2012, although you'd have to right-click the MSI package to enable "compatibility mode for previous Windows versions" first.

But PAN OS .0 requires TS Agent 8.0. That versions installs, and everything looks fine. The PANs communicate, the agent shows users with port ranges, the debug.log document shows no problems, the firewall sends requests - and never receives answers. Something's broken. Ouch...

If anyone has a workaround or a better way of diagnosis?