topic Re: PAN Agent Settings in General Topics

PAN Agent Settings

network — Sun, 14 Nov 2010 14:04:21 GMT

We are implementing the PAN User ID agent and we were wondering what everyone else was doing.. did you just leave it as the defaults?

Re: PAN Agent Settings

dagibbs — Sun, 14 Nov 2010 22:44:48 GMT

Hi.

I modified the "Age time out" string to a much higher value because I have a high percentage of users who logon to a machine then stay logged in for 10-12 hours, which means the entry in the Security log will be not be refreshed in the 45 minute default.

I also enabled "WMI" probing for unknown users rather than Netbios.

Apart from that, I left the settings at the default.

Cheers.

Re: PAN Agent Settings

rahmant — Mon, 15 Nov 2010 17:51:32 GMT

Just for warning, you should probably check with support before modifying anything

We had to modify the security log timers from 1 sec to 120 secs, as the agent was bombarding our WAN connections with query traffic.

Tariq