topic Re: Integrated User-ID Agent in General Topics

Integrated User-ID Agent

rich.hansen — Thu, 24 Apr 2014 21:14:40 GMT

Has anyone started using this new feature in PAN-OS 6.x?

I have 20+ firewalls and I'm really not looking forward to deploying/managing 20+ Kiwi Syslog servers. In our environment, we collect SNMP traps from our WLCs and send the parsed data to the UID Agent Server. It works, but way too much to administer and troubleshoot. Have any of you dumped the UID Agents in favor of the Integrated User-ID Agent?

Re: Integrated User-ID Agent

cpainchaud — Fri, 29 Aug 2014 18:13:24 GMT

Agent can listen to Syslog messages, not SNMP Traps.

Re: Integrated User-ID Agent

ialeksov — Tue, 02 Sep 2014 22:38:56 GMT

Hi Rich,

Check these two links out:

This works perfectly and I have configured it on multiple occasions for customers that like to use WLC's to get the mappings to the firewalls.

How to Collect the User-IP Mappings from a Syslog Sender Using an User-ID Agent

How to Configure a Custom Syslog Sender and Test User Mappings

I hope this helps you.

Re: Integrated User-ID Agent

cpainchaud — Tue, 02 Sep 2014 23:00:48 GMT

Which works with many vendors but not Cisco WLC which doesn't send user infos on Syslog, only through SNMP.