topic Re: User-ID Detection fails after install a second Terminal Server Agent in General Topics

User-ID Detection fails after install a second Terminal Server Agent

mhuels — Fri, 18 Jun 2010 10:57:22 GMT

After installing 10 terminal server agents and 1 PAN-agent on a PA-2050 the appliance cannot connect to any agent.

admin@mi2-pan2> show user pan-agent statistics

Name IP Address Port Vsys State Users Grps IPs Activity Cnts Link Speed
----------------------------------------------------------------------------------------------------------------------
issdeploy 192.168.1.13 9995 vsys1 trying to connect 0 0 0 0 fast

admin@mi2-pan2> show user ts-agent statistics

Name             IP Address      Port    Vsys        State             Users Blocks Version
-----------------------------------------------------------------------------------------------
ms3-ctx1         10.53.222.31    5009    vsys1       trying to connect 0      0
ms3-ctx2         10.53.222.32    5009    vsys1       trying to connect 0      0
ms3-ctx3         10.53.222.33    5009    vsys1       trying to connect 0      0
ms3-ctx4         10.53.222.34    5009    vsys1       trying to connect 0      0
ms3-ctx5         10.53.222.35    5009    vsys1       trying to connect 0      0
ms3-ctx6         10.53.222.36    5009    vsys1       trying to connect 0      0
ms3-ctx7         10.53.222.37    5009    vsys1       trying to connect 0      0
ms3-ctx8         10.53.222.38    5009    vsys1       trying to connect 0      0
ms3-ctx9         10.53.222.39    5009    vsys1       trying to connect 0      0
ms3-ct10         10.53.222.40    5009    vsys1       trying to connect 0      0

The system says "trying to connect", but it did not, as we can proof with network snifffing.

The system works fine with 1 PAN-agent and 1 TS-agent.

Re: User-ID Detection fails after install a second Terminal Server Agent

swhyte — Fri, 18 Jun 2010 22:35:18 GMT

Hello,

I believe this is a bug. Please call into support in order that it can be verified.

thank you,

Stephen

Re: User-ID Detection fails after install a second Terminal Server Agent

robert.b — Mon, 21 Jun 2010 12:30:33 GMT

Isn't this because you need different port numbers for each agent?

Re: User-ID Detection fails after install a second Terminal Server Agent

mhuels — Wed, 30 Jun 2010 15:30:08 GMT

robert.blazye schrieb:

Isn't this because you need different port numbers for each agent?

No, because of the different ip destinations it is not.

After a reboot of the Palo Alto System, all works well.

Re: User-ID Detection fails after install a second Terminal Server Agent

robert.b — Tue, 13 Jul 2010 07:49:38 GMT

I was thinking that it was the agent talking to the PAN, but it is the PAN talking to the agent. I'm sure I was originally told that I had to have a unique port number for each agent, be it TS agent or User ID agent.

Re: User-ID Detection fails after install a second Terminal Server Agent

mhuels — Mon, 07 Feb 2011 13:37:10 GMT

Reboot was the correct solution