panorama and user-id agent connections

L4 Transporter

panorama and user-id agent connections



I have a A/P clusert and I have panorama talking to it and also other PA's to distribute userid info.


Now I have agent configured from panorama to each of the management ports on the A/P cluster.


But 1 is always failing - as its the passive one,


I was thinking i should actually attach userid agent to a lo back device and have only 1 agent configured from panorama to that address.  


any thoughts ??

L3 Networker

Re: panorama and user-id agent connections

Yes, create a DP interface that will fail over the IP between A/P, and attach a management interface profile that allows User-ID to that interface. Configure the single IP in Panorama as a User-ID agent. 



Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!