topic Re: PAN auto discover domain server on Server Monitoring in User Mapping in General Topics

PAN auto discover domain server on Server Monitoring in User Mapping

Register_Security — Sat, 28 Sep 2013 02:12:40 GMT

My device only setup User Identification with LDAP server and now disable. But it always discover the all domain server in the network automatically.

I want to stop discover function, please show me how and where to configure?

Thanks so much

Re: PAN auto discover domain server on Server Monitoring in User Mapping

gswcowboy — Sat, 28 Sep 2013 04:38:29 GMT

Quickest way is to remove 'Domain' information in Setup:

Device Tab -> Setup -> Management -> Domain

Commit changes.

Re: PAN auto discover domain server on Server Monitoring in User Mapping

Register_Security — Mon, 30 Sep 2013 03:18:01 GMT

Hi Nato

Thank for your answer. It is so helpful,

My system have many servers, but it only found four servers and add them in to Server Monitoring.

I want to know the reason, Which is the criteria using for discovering ?

You have more experiences for palo alto, please share !

Thanks

Re: PAN auto discover domain server on Server Monitoring in User Mapping

gswcowboy — Mon, 30 Sep 2013 22:04:10 GMT

Hi,

If you're using the agentless UID on the PA device, auto discovery would be feasible if domain information is configured on the PAN. If you're using actual UID agents on your LAN (ip-user-mapping done on Agent instead of PAN), you don't need to concern yourself with the discovery of ADs in your environment. I'll need to scour for more data if you wish to know what the prerequisites are for auto discover of DCs in your network. Just don't know it off hand.