topic Re: Palo Alto support Windows Server 2012 R2? in General Topics

Palo Alto support Windows Server 2012 R2?

ZEBIT — Mon, 28 Jul 2014 08:59:03 GMT

Hi,

At this moment we user Userd-ID agents on our WIndows Server 2008 R2 AD servers. But we want to upgrade all the servers to Windows Server 2012 R2. Does Palo Alto already support userd-ID agents on Windows Server 2012 R2 and what firmware needs to be installed on the firewall?

Re: Palo Alto support Windows Server 2012 R2?

_slv_ — Mon, 28 Jul 2014 09:17:47 GMT

Hi Zebit

Please read tech doc from PAN6.0.3 there is information:

USER IDENTIFICATION FEATURES

• Windows Server 2012 Support for User-ID/Terminal Server Agents—(Supported as of PAN-OS 6.0.2) You can now install the Windows-based User-ID agent or Terminal Server agent on a system running the Microsoft Windows Server 2012 operating system. The User-ID agent that runs on the firewall can also integrate with Windows Server 2012 for user mapping and group mapping. The procedures to install the User-ID agent and configure mappings are the same as for servers supported in earlier releases (Windows Server 2003 and 2008).

You can download it from https://support.paloaltonetworks.com/Updates/SoftwareUpdates/8702

IMHO 6.0.3 PAN OS is a first that support Windows 2012 on User-id feature but few peoples reported that on erlier version than UaInstall-6.0.2-3.msi it works. Please search this community for more details.

With regards

Slawek

Re: Palo Alto support Windows Server 2012 R2?

ZEBIT — Tue, 29 Jul 2014 10:04:23 GMT

But as we have Windows Server 2012 R2 and this is not in the list, I need to wait.

Re: Palo Alto support Windows Server 2012 R2?

_slv_ — Tue, 29 Jul 2014 10:27:53 GMT

ooops, I missed "R2" - sorry

Re: Palo Alto support Windows Server 2012 R2?

_slv_ — Thu, 07 Aug 2014 16:33:44 GMT

Hi Zebit

From 6.0.4 relase notes:

USER IDENTIFICATION FEATURES

• Windows Server 2012/2012 R2 Support—(Supported as of PAN-OS 6.0.3) You can now install the Windows-based User-ID agent on a system running the Windows Server 2012/2012 R2 operating system (OS) and you can now install the Terminal Server agent on a system running the Microsoft Windows Server 2012 R2 operating system. The User-ID agent that runs on the firewall can also integrate with Windows Server 2012/2012 R2 for user mapping and group mapping. The procedures to install the User-ID agent and/or Terminal Server agent and configure user mapping are the same as for servers supported in earlier releases (Windows Server 2003 and 2008).

I hope that it's a good news for You

Regards

SLawek