topic about agentless user-id in panos-5.0 in General Topics

about agentless user-id in panos-5.0

KiCheon.Lee — Mon, 05 Aug 2013 10:46:42 GMT

Hello

I have a questions about agentless user-id in panos-5.0.

I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.

Are these time values same in PANOS-5.0?

If it is right,

Do user ip mapping in MP run instead of agent role in PANOS-4.1? Are MP cache times 45minutes(default)?

and Do user ip mapping in DP run instead of FW role in PANOS-4.1? Are DP cache times also 1 hour(default)?

Thanks

Re: about agentless user-id in panos-5.0

kprakash — Mon, 05 Aug 2013 12:23:40 GMT

Hi Cheon,

The same timers apply to the PANFWs running on 5.0, having the agentless service configured. Please find below the docs that explain about the timers on the PANFW ( and it applies to both the agent and the agentless services )

https://live.paloaltonetworks.com/docs/DOC-4551

I hope this helps.

BR,

Karthik RP

Re: about agentless user-id in panos-5.0

KiCheon.Lee — Tue, 06 Aug 2013 09:09:13 GMT

Thanks, kprakash.

Are there both ip-user-mapping info on DP and ip-user-mapping-mp info on MP when make user-id with user agent??

Re: about agentless user-id in panos-5.0

kprakash — Wed, 07 Aug 2013 21:34:39 GMT

Hi Cheon,

Yes, we have the mappings on both the management plane and the data-plane. Hope that helps!

BR,

Karthik

Re: about agentless user-id in panos-5.0

zarina — Wed, 07 Aug 2013 21:46:12 GMT

You can view the MP mappings through:

> show user ip-user-mapping-mp all

DP mappings:

> show user ip-user-mapping all