topic Re: UserID and multiple VSYS in General Topics

UserID and multiple VSYS

BrutalDismount — Wed, 26 Dec 2012 19:00:04 GMT

From what I understand from the 5.0 documentation so far, each VSYS needs to be setup with separate userID agent configurations. There is no sharing of user-ID information between virtual systems. Is this assumption correct? I am seeing very inconsistent results between mulitple vsys's when I show a list of users. VSYS1 will show ~2500 users and VSYS2 will only show ~100. Anyone else using multiple Vsys run into similar inconstancies?

If I attempt to leverage agent-less UserID I am unable to commit both configurations. Is one vsys suppost to redistribute to the other?

Operation	Commit
Result	Failed
DetailsError: Both vsys vsys1 and vsys2 have agentless NTLM enabled. Agentless NTLM is supported in one vsys only(Module: useridd) Commit failed

Re: UserID and multiple VSYS

sdurga — Thu, 27 Dec 2012 05:30:17 GMT

Hi Tim,

In 5.0 angetless NTLM is supported for vsys1 only. You will run into this issue if you try to configure angentless NTLM for any other VSYS.

Tx,

Sandeep T

Re: UserID and multiple VSYS

bvandivier — Thu, 27 Dec 2012 19:15:06 GMT

Hello Tim, this assumption is correct:

"From what I understand from the 5.0 documentation so far, each VSYS needs to be setup with separate userID agent configurations. There is no sharing of user-ID information between virtual systems. Is this assumption correct?"

For user identification it is recommended that your user-ID agent and group mapping configurations are unique per virtual system.