Traps Endpoint Installation

[m.hassan96]

Hi , I'm new to Palo Alto Traps Endpoint platform. I have a question regarding Traps Installation for On-Site Standalone deployment

- Do we need to configure Active Directory in our environment before installing Traps ? Is Active Directory mandatory for Traps ESM and Agents installation?

Any help would be much appreciated. Thanks

[BPry]

@m.hassan96,

ESM will handle things perfectly fine without Active Directory. 

[AbdulRahman_Safwat]

Hello @m.hassan96,

Active Directory is not a requirement for Traps deployment, and Traps will work fine without it.

Active Directory can be integrated with Traps to authenticate ESM Administrators, and to use Active Directory objects, and also it will make it easier for big environments to push the certificates through a GPO if SSL is being used.

But still it is not a requirement.

[m.hassan96]

@BPry , @AbdulRahman_Safwat  Thanks for your replies. So I just need to Configure ESM , install Trap Agents on Workload VMs and specify IP of ESM server and thats it. Agents will be able to pull updates and security policies from ESM server on that IP address, no furthur configuration or authentication is required. Is that right? Kindly correct me if I'm wrong 

[BPry]

@m.hassan96 ,

Correct. When you install the ESM you'll ideally specify a certificate signed by a trusted CA so that the Client and the server can securely determine whether or not they trust each other; the Server itself will need to be allowed access to the outside to pull the updates, but the agents themselves will pull the updates from the ESM on port 2125 (by default). 

[m.hassan96]

@BPry Thanks that helped a lot. Just to make things more clear, What If we don't use any kind of certificates? I'm assuming Communication between Agents and ESM server would still happen but it would be less secure (no encryption). Is that right?