topic Re: Query on User-ID Agent in General Topics

Query on User-ID Agent

Farzana — Thu, 30 Nov 2017 00:24:14 GMT

Hello,

The issue we are currently facing is we have reached the maximum amount of items 50 in the PA user id agent software and currently have it running on 2 servers and have 100 devices now again we need to install on a third server to allow for more items.

Is there another solution? or new version that allows more then 50 items?

We are using PAN-OS 8.0.3

Thanks in advance.

Re: Query on User-ID Agent

reaper — Thu, 30 Nov 2017 20:36:34 GMT

hi @Farzana

I'm not sure I understand what you mean by 50 items

the user-ID agent upports thousands of users, up to 10 AD servers, and 1024 ACL entries

Re: Query on User-ID Agent

Farzana — Thu, 30 Nov 2017 21:41:02 GMT

Hi @reaper,

I have checked the documentation for the latest PAN-OS and it says that within the total maximum of 100 monitored servers per firewall, you can define no more than 50 syslog senders for any single virtual system. So I was wondering if there is any other solution.

Re: Query on User-ID Agent

reaper — Thu, 30 Nov 2017 22:07:54 GMT

ah! syslog senders!

ok, so you currently have 100 syslog senders?

If you need more than 50 of those per UserID Agent, you'll need to reach out to your sales team and have them open a feature request for you

Could you elaborate on why you need so many syslog senders? maybe we can tackle that volume with a creative solution instead