topic Make PA speak to AD without a User-ID Agent? in General Topics https://live.paloaltonetworks.com/t5/general-topics/make-pa-speak-to-ad-without-a-user-id-agent/m-p/40541#M29778 <HTML><HEAD></HEAD><BODY><P>In order to use AD-integration in the PA unit (setup security rules based on logged in user or which group the logged in user belongs to) one need today to setup a few additional servers running the User-ID Agent (unless you want this agent to be running straight on your AD-servers).</P><P></P><P>What would be nifty is if the PA unit could speak directly to the AD (using its own read-only account) without the need of any additional servers.</P><P></P><P>Is this perhaps already on the roadmap and is this even possible (I mean sure there is a mgmt-plane but I guess there is a reason for why the User-ID Agent of today is an external process instead of internal one)?</P><P></P><P>Or can this be done today already with lets say 4.1.1 (or the soon to be released 4.1.2)?</P></BODY></HTML> Sun, 08 Jan 2012 19:53:11 GMT mikand 2012-01-08T19:53:11Z Make PA speak to AD without a User-ID Agent? https://live.paloaltonetworks.com/t5/general-topics/make-pa-speak-to-ad-without-a-user-id-agent/m-p/40541#M29778 <HTML><HEAD></HEAD><BODY><P>In order to use AD-integration in the PA unit (setup security rules based on logged in user or which group the logged in user belongs to) one need today to setup a few additional servers running the User-ID Agent (unless you want this agent to be running straight on your AD-servers).</P><P></P><P>What would be nifty is if the PA unit could speak directly to the AD (using its own read-only account) without the need of any additional servers.</P><P></P><P>Is this perhaps already on the roadmap and is this even possible (I mean sure there is a mgmt-plane but I guess there is a reason for why the User-ID Agent of today is an external process instead of internal one)?</P><P></P><P>Or can this be done today already with lets say 4.1.1 (or the soon to be released 4.1.2)?</P></BODY></HTML> Sun, 08 Jan 2012 19:53:11 GMT https://live.paloaltonetworks.com/t5/general-topics/make-pa-speak-to-ad-without-a-user-id-agent/m-p/40541#M29778 mikand 2012-01-08T19:53:11Z Re: Make PA speak to AD without a User-ID Agent? https://live.paloaltonetworks.com/t5/general-topics/make-pa-speak-to-ad-without-a-user-id-agent/m-p/40542#M29779 <HTML><HEAD></HEAD><BODY><P>currently this is not supported. you can create a enhancement request. i have checked internally and there is no roadmap for this at the moment. </P></BODY></HTML> Wed, 18 Jan 2012 05:15:42 GMT https://live.paloaltonetworks.com/t5/general-topics/make-pa-speak-to-ad-without-a-user-id-agent/m-p/40542#M29779 jnguyen 2012-01-18T05:15:42Z