topic Re: User-ID agent configs in multiple templates not stackable?? in General Topics

User-ID agent configs in multiple templates not stackable??

bspilde — Thu, 30 Jun 2016 19:54:09 GMT

I'm only able to get User-ID agents pushed to the firewall that are in the top template in the stack. I was quite certain this worked when I installed it but have since done OS upgrades. Panorama is 7.1.2.

I have the User-ID agents running on two servers there in my "Global" template and then on the device specific template I need to have my PA GlobalProtect VPN box listed as a User-ID agent as well for my primary firewall to receive GP user to IP mappings. (users do not access the internet through the VPN PA)

Re: User-ID agent configs in multiple templates not stackable??

rmonvon — Fri, 01 Jul 2016 17:59:42 GMT

Hi...Do the userID agents have the same name? For overlapping settings, the top template will be used.

Re: User-ID agent configs in multiple templates not stackable??

bspilde — Fri, 01 Jul 2016 18:43:39 GMT

No, totally unique names. If we create a test stack on a test template and use it underneath my "T_Global" in the stack it does work as expected.

So I have UIDAgent1 and UIDAgent2 in T_Global and Country1 and Country2 in the "DT" Device specific template.

Support says delete and rebuild the stack.