topic About User-ID Collector with GlobalProtect in General Topics

About User-ID Collector with GlobalProtect

Retired Member — Sat, 05 Oct 2013 09:47:41 GMT

Hello Guys.

As you know that User-ID Collector in Agentless Environment is very useful for USER-ID. I know that User-ID Collector would send only information of user-ip-mapping to other Firewall.

I know that User-ID Collector only send a information of user-ip-mapping from agentless environment to other Firewall.

So I am very curious about User-ID Collector. When GlobalProtect installed environment, Would User-ID Collector send a user-ip-mapping information of GlobalProtect to other Firewall? or not?

Please let me know how User-ID Collector deal with the information of user-ip-mapping from GlobalProtect.

Thanks.

Regards,

Roh

Re: About User-ID Collector with GlobalProtect

apasupulati — Sat, 05 Oct 2013 16:50:52 GMT

Hello,

Yes, the User-ID collector firewall will pass on the user-ip-mappings(incl. captive portal & global protect). On the collector you will see the GP ip-mappings as learnt from UIA instead of GP.

Refer:

GlobalProtect Users Appear as Coming From User-ID Agent in IP-User Mapping

How to Configure and Verify User-ID Collector in PAN-OS 5.0

Hope that helps,

Aditi

Re: About User-ID Collector with GlobalProtect

Retired Member — Tue, 08 Oct 2013 05:40:23 GMT

Hi Aditi,

Thank you very much.

I solved the issue from your answer and It's a very cool feature for User-ID deployment

Have a nice day!

Thanks again.

Regards,

Roh