topic Re: Port used by the user id agent to talk to AD server in General Topics

Port used by the user id agent to talk to AD server

MP18 — Wed, 13 Nov 2019 20:34:00 GMT

We have PA user id agent running on the windows server.

Need to confirm Port used by the User id agent to talk to AD for user to ip mappings

is this port tcp 5006?

where should i look for?

Re: Port used by the user id agent to talk to AD server

OtakarKlier — Wed, 13 Nov 2019 22:56:12 GMT

Hello,

By default, its port 5007. It will initiate from the client/server to the PAN on the management interface. You should be able to see it connect if you go to the Device tab -> User Identification ->User-ID agent subtab. The ball should be green. Also if you have the local firewall turned on on the server, make sure you are allowing port 5007/tcp outbound.

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/user-identification/device-user-identification-user-id-agents.html

Regards,

Re: Port used by the user id agent to talk to AD server

pteixeira — Wed, 13 Nov 2019 23:13:31 GMT

Think the question was what port the UserID agent uses to talk to AD (not the Palo).

UserID to AD servers port usage is referenced here:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall-administration/reference-port-number-usage/ports-used-for-user-id

Re: Port used by the user id agent to talk to AD server

MP18 — Thu, 14 Nov 2019 02:40:20 GMT

I have gone through that link so need to confirm if port used is 5006?

Re: Port used by the user id agent to talk to AD server

MP18 — Thu, 14 Nov 2019 02:41:19 GMT

Thanks for replying.

Need to confirm port used between user id agent running on Windows server and AD?

Re: Port used by the user id agent to talk to AD server

Mick_Ball — Fri, 15 Nov 2019 11:45:41 GMT

Our Windows based user agents are using TCP 445 to all our DC's.

Re: Port used by the user id agent to talk to AD server

MP18 — Sat, 16 Nov 2019 17:03:29 GMT

how can I verify that from user id agent running on windows server?

Re: Port used by the user id agent to talk to AD server

Mick_Ball — Sat, 16 Nov 2019 19:06:38 GMT

On the windows server run a command prompt and use

netstat -an

look for established connections from agent server to ad server,

Re: Port used by the user id agent to talk to AD server

MP18 — Sat, 16 Nov 2019 19:37:20 GMT

Will try that

Re: Port used by the user id agent to talk to AD server

MP18 — Sun, 24 Nov 2019 17:01:53 GMT

Tested it is using port 445.

Thanks for help