topic Document on VM information sources for Windows User-ID Agent? in General Topics

Document on VM information sources for Windows User-ID Agent?

Sec101 — Mon, 19 Aug 2019 14:21:23 GMT

Anyone have a good document or link on the windows user-id agent for monitoring VM information sources? Looks easy enough to setup on the windows agent, but how does it monitor/parse logs and what exactly does it do when making the connection/permissions for the account?

Re: Document on VM information sources for Windows User-ID Agent?

TSilverline — Mon, 19 Aug 2019 22:13:38 GMT

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/device/device-vm-information-sources.html

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/device/device-vm-information-sources/settings-to-enable-vm-information-sources-for-vmware-esxi-and-vcenter-servers.html

Re: Document on VM information sources for Windows User-ID Agent?

Sec101 — Fri, 23 Aug 2019 20:18:50 GMT

Thank you for the links. Does the windows user-id agent pull in tags directly off of the esxi/vcenter host then- and foward them directly to the firewall itself? Is it strictly for ip address to username mapping, or does this pull in tagged vm's as well, and pass that tag information to the firewall?